Analyzing the Sony PlayStation Network Security Breach of 2011

This case study examines the Sony PlayStation Network (PSN) data breach that occurred in April 2011, resulting from an external intrusion aimed at stealing customer data. The breach exploited vulnerabilities in Sony's software, allowing attackers to access the network and steal data from approximately 77 million PSN user accounts and 24.5 million Sony Online Entertainment accounts. The attack involved sophisticated techniques to conceal the intrusion, including deleting log files. The consequences included significant financial losses estimated at $171 million, service shutdowns, and reputational damage. The case study also discusses the customer response to the delayed announcement of the breach and explores potential preventative measures that Sony could have implemented, such as a comprehensive IT security framework, regular security software updates, and advanced intrusion detection systems. It concludes by emphasizing the importance of proactive contingency planning and timely communication in mitigating the impact of such incidents. This document is available on Desklib, a platform offering a range of study tools and solved assignments for students.

Sony PlayStation
Breach

 Security breach is basically an event that results from
an unauthorized access of data, applications, networks
or devices by way of bypassing the underlying securities
mechanisms.
 Nowadays, not only business organizations but also the
individuals make use of internet technology in their
routine life to a great extent and as a result of which
they share their private, confidential and sensitive
information on e-platform where there are high risks of
security breaches.
Security Breaches

 The issue of cyber securities has become quite
common and frequent in today’s world due to
heavy reliance on the internet. During the last few
years large number of incidents has taken place
where massive security breaches were reported.
The PlayStation breach at Sony is the classic
example of securities breach that occurred in April
2011 [3].
Security Breach at Sony

 The PlayStation network breach at Sony was
the outcome of some external intrusion of its
PlayStation Network (PSN) with the aim of
stealing the important customer data of Sony.
 When the PSN servers were hit by the Denial of
service attacks (DoS), the criminals of the said
security violation accessed the servers illegally.
The security team at Sony was busy in dealing
with the DoS attacks and hence they could not
recognize the intrusion on time.
Introduction

 It was identified by the forensic team that the attackers
had exploited a flaw in some of the Sony’s software and
deployed aggressive tactics and techniques to obtain the
network access by the illegitimate ways so as to boost
their network privileges.
 Additionally, they used sophisticated techniques to
conceal themselves from the network administrators,
such as deleting the log files.
How the breach occurred?

 On April 19, when various servers at Sony were rebooting even
without the scheduled program, the company had discovered
the fact that the data centre of the company which is located at
San Diego was hacked by some anonymous hackers who had
accessed the unauthorized data of the company that was kept
at servers of its PlayStation Network (PSN).
 It stole data from77 million users accounts of PSN server and
from the 24.5 million user accounts of Sony Online
Entertainment.
Identification of Breach

 Between the period of April to May in 2011, not only the
PlayStation Network of Sony but also various other
platforms such as the online gaming service of Sony
computer entertainment and Qriocity which was the
streaming media service of Sony along with Sony online
entertainment, the developer and publisher of Sony’s in-
house game were attacked by LulzSec that was the
unidentified hacker group [4].
Other affected Services

 Shutting down the systems after the
discovery of threats had caused Sony a
substantial cost.
 As compensation the company had to offer
free services to its customers for several
days along with the additional free month
subscription.
 Apart from this, the company had to also
provide its customers the services in
connection of identity theft protection.
Continued…

 Between the period of April to May in 2011,
not only the PlayStation Network of Sony but
also various other platforms such as the
online gaming service of Sony computer
entertainment and Qriocity which was the
streaming media service of Sony along with
Sony online entertainment, the developer and
publisher of Sony’s in-house game were
attacked by LulzSec that was the unidentified
hacker group.
Consequences of breach

 It was reported by Kazuo Hirai, the
chairman of Sony Computer
Entertainment America LLC., that the
hackers had rummaged through
various private and sensitive customer
data such as their names, e-mail IDs,
date of births, the account login IDs
and passwords and the online IDS.
 As the credit card data of the
customers was encrypted it could not
be hacked by the intruders. However,
the other data was encrypted at the
time of security breach [2].
What Information was hacked?

 Due to the sophistication of the security
breach incident, Sony and the team of
forensic consultants hired for the
investigation of the breach took several days
to figure out and confirm the actual extent of
data loss happened at the company.
 The online service facilities at Sony were
kept inactive during the period from April 20
to May 15, 2011 for the purpose of securing
the breach [1].
Period of inactivity:

 The loss out of the massive breach was estimated
to be around $171 million which included the cost
of business loss and the cost related to responding
to the breach such as identification and fixation of
breach, notifying different subscribers and network
up-gradation [4].
 However, the said figure of loss did not include the
cost of actions against the law suits filed by the
customers of the company. There was also a decline
in the share prices of the company in the market
when the news of data breach at Sony came out.
Loss on account of PSN breach