HackingTechnologyInformationCustomer Data InvolvedTargetedPIIIdentity (basic)CredentialsFinancial accountHighActive

Sony Group Corporation

bd_d04228825996027a · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Apr 26, 2011

To disclose

—

Affected

118,290state residents only

Linked

2 filings

Confidence

67%

Full breach record for Sony Group Corporation →4 incidents on file

Sony Network Entertainment America Inc. reported an unauthorized intrusion into the PlayStation Network and Qriocity platform occurring between April 17-19, 2011. The incident compromised personal information of approximately 118,290 New Hampshire residents, including names, addresses, emails, birthdates, and credentials. Services were temporarily suspended and a security firm engaged.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 17, 2011

Begins

Apr 26, 2011

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_fb3ceadc8419603c2011-05-02 · +6dVerified

Name: Sony Group Corporation
norm: sony group
Domain: sony.com

Name: Sony Group Corporation
norm: sony group
Domain: sony.com
Industry: Technologyllm

Discovered: —
Breach occurred: Apr 17, 2011 – Apr 19, 2011
Materiality determined: —
Notification sent: —
Affected individuals: 118,290state-resident count only
Data types: PIIIdentity (basic)CredentialsFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General

During the incident: Temporarily turned off PlayStation Network and Qriocity services
Engaged an outside, recognized security firm to investigate this incident
Taken steps to enhance security and strengthen our network infrastructure by re-building our system
Changes made: Re-building our system to provide greater protection of our user's personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 26 · first · this page

Massachusetts State AG+6d

Pattern: first filing Apr 26 (NH), last May 2 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sony-20110426.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 26, 2011
Raw hash: 4c3e38b3e22d368400a9fa1c95bc9aaad3e15e3461b16ccb6320c50a3e89533e

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySony Group Corporation

Victim entitySony Group Corporation

IncidentUnauthorized Access

Stated responseTemporarily turned off PlayStation Network and Qriocity services

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov