A new post from Patrick Seybold (Sr. Director, Corporate Communications & Social Media) on the PlayStation Blog attempts to clarify some of the facts that were released earlier today by SCEA. Seybold says that SCEA first identified that there was a security breach of PSN and that user data might have been compromised on April 19.
It wasn't until yesterday, says Seybold, that the security firm it hired figured out that user data and credit card info had been compromised. Today it shared that information with the public. Below is Seybold's post from PlayStation Blog:
"I wanted to take this opportunity to clarify a point and answer one of the most frequently asked questions today.
There’s a difference in timing between when we identified there was an intrusion and when we learned of consumers’ data being compromised. We learned there was an intrusion April 19th and subsequently shut the services down. We then brought in outside experts to help us learn how the intrusion occurred and to conduct an investigation to determine the nature and scope of the incident. It was necessary to conduct several days of forensic analysis, and it took our experts until yesterday to understand the scope of the breach. We then shared that information with our consumers and announced it publicly this afternoon.
For those who were looking there’s also an FAQ with some more frequently asked questions
Thank you for your continued patience and support."
The FAQ can be found here. This statement sounds like Sony trying to back-track on just how long it took them to inform consumers that their data and credit card info had been stolen. We will continue to follow this story as it develops.
Source: PlayStation Blog