The PSN debacle is continually evolving as the extent of the damage is made clear, though it should be noted that we’re still in the early stages and a lot of what’s out there is guesswork and hearsay. The good news is that the FBI is on the case, and a number of more local authorities are taking action as well. The bad news is that the hackers may in fact have the credit card numbers and, despite Sony’s claims, the CV2 codes as well.
Speaking to Kotaku, the FBI confirmed that it is in contact with Sony and is reviewing the evidence. Connecticut’s Attorney General sent a strongly-worded letter to Sony evincing his concern over Sony’s (apparent) slowness to warn its customers they were at risk. It’s not just the US, either: Taipei announced it would be fining Sony if questions have not been answered satisfactorily within 10 days.
Meanwhile, a rumor began spreading around the net that hackers were trying to sell a list of 2.2 million credit cards with CV2 codes included. However, there are a number of reasons these reports are suspicious. The hackers provided no proof they had the lists, for one thing. As to the CV2 codes, without which the cards are less able to be abused, Sony said the information was never collected. This was shown not to be the case (the code is asked for when you join PSN) but Sony says the code wasn’t retained, as it is essentially a one-time authentication method. Furthermore, the cards are said to have been encrypted, though there’s no confirming whether that protection is intact.
What should you do? It wouldn’t be a bad idea to have your credit and debit cards replaced, and to change your password on any site where you might have used the same username/password combo. If you sustain any financial damage, document it. Watch the Playstation Blog for further updates and Q&As so you’ll be informed when new information is made public. 1up has also been posting good roundups of data. But expressing your disappointment with Sony can wait until all the facts are in; right now they’re in damage control mode full-time, and complaints will just be added to the pile.