HackingTechnologyInformationVulnerability ExploitData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)CredentialsMediumActive

Sony Online Entertainment

bd_341fbdc9c43a6c6f · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 1, 2011

Filed

May 2, 2011

To disclose

≤1 day

Affected

26,504state residents only

Linked

3 filings

Confidence

66%

Full breach record for Sony Online Entertainment →

Sony Online Entertainment LLC notified New Hampshire AG that between April 16-17, 2011, unauthorized access may have obtained customer PII (name, address, email, login, hashed password) from its database. Discovery occurred May 1, 2011. Notification sent May 2, 2011, to approx. 26,504 NH residents. An older 2007 database containing credit card numbers for non-US customers was also potentially compromised. Services were temporarily suspended and forensic investigators engaged.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 15 days

discovery → filing · ≤1 day / 1 days

Apr 16, 2011

Begins

May 1, 2011

Discovered

May 2, 2011

Filed

vs. sector median

13 wks faster

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_8d280542346cbe582011-05-02Verified
Massachusetts State AGbd_7424c3090cc4c8282011-05-05 · +3dVerified

Name: SONY INTERACTIVE ENTERTAINMENT LLC
norm: sony interactive entertainment
Domain: sonyinteractive.com

Name: Sony Online Entertainment
norm: sony online entertainment
Industry: Technologyllm

Discovered: May 1, 2011
Breach occurred: Apr 16, 2011 – Apr 17, 2011
Undetected for: 15 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 2, 2011
Affected individuals: 26,504state-resident count only
Data types: PIIIdentity (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Contacting relevant state authorities, including your agency
Initial access: exploit_public_facing

During the incident: Engaged an outside, recognized security firm to investigate this incident
Temporarily turned off all SOE game services
Enhanced security and strengthen our network infrastructure by re-building our system
Changes made: Enhanced security and strengthen our network infrastructure to provide you with greater protection of our users’ personal information
Providing a complimentary offering to assist users in enrolling in identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(1 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Massachusetts State AGMay 2 · first

New Hampshire State AGMay 2 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sony-online-20110502.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 2, 2011
Raw hash: 3a16e0aacdc4ef7928638cf4e4feb32dbebe1b445d967b4a4f5e28765ae2be90

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySONY INTERACTIVE ENTERTAINMENT LLC

Victim entitySony Online Entertainment

Incidentdiscovered May 1, 2011

Stated responseEngaged an outside, recognized security firm to investigate this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov