Sony claims there is “no evidence credit card numbers were stolen”, however just a few hours ago, one of TrendMicro’s online security experts, Kevin Stevens, tweeted this disturbing information:
“The hackers that hacked PSN are selling off the DB. They reportedly have 2.2 million credits cards with CVVs #psnhack”.
He also goes on to state that the database contains users’ full name, address, zip code, country, phone number, email, password, date of birth, full credit card number, CVV2 number, and expiration date. Steven’s never links directly to any source, but simply claims that he saw it on an “underground criminal forum” and also that the sellers supposedly offered Sony a chance to buy the database back, however they didn’t.
Keep in mind though this is still unconfirmed. Sony hasn’t released any more information about the situation since Steven’s original tweet, and Stevens himself hasn’t seen the database, so all the information he has about it is coming directly from the seller’s post. For all we know, these could be just a few scammers trying to make some serious cash off an already terrible situation, let’s hope for everyone’s sake that’s just the case.
UPDATE: Sony to speak on PSN breach