The Internet is awash with people demanding compensation as their personal data is now in the hands of hackers but they may be in for a shock if they take legal action against Sony. MCV has noted the following statement in the Sony Online Terms & Conditions:
We exclude all liability for loss of data or unauthorised access to your data, Sony Online Network account or Sony Online Network wallet and for damage caused to your software or hardware as a result of using or accessing Sony Online Network.
Sony may be liable to a fine from Information Commissioners Office (ICO) of up to £500,000 if they are found to have broken the UK Data Protection Act but it appears that individual PSN users will not be able to claim any financial compensation.
Source: MCV
colmshan1990
To every person above bleating about Sony not protecting information or not taking reasonable care:
As cc_star has said constantly over the last week, these kind of attacks happen a lot, to many companies.
The PSN is too big of a target for this not to have been attempted before.
The PS3 itself lasted 4 years before being properly hacked.
You cannot say that SCE did not take security of it’s console and it’s network seriously.
Flash
But everyone seems to forget about their legendary security once its finally breached. You’d think everyone who plays games has the mind of a 1 year old child – a sponge…
3shirts
Normally I would agree with you but a lot of the information that is coming out is sounding very negligent. I acknowledge that we don’t now anything for sure yet but I am seeing a lot of information that suggests Sony’s security was all about stopping people getting in, with little attention to encrypting/protecting user data.
Once the firewalls were breached, extracting data was (seemingly) trivial.
jimmy-google
The information most are referring to is nothing more than rumour at present. Anyone can write in a forum claiming there wasn’t much security but it will done to the government agencies who will access to the real data to determine whether there actually was any negligence.
The other question will be was it one individual who screwed up or was there a fundemental problem?
at present no one has been able to official confirm whether the data obtain was encrypted or not. Sony isn’t saying and no one else has shown evidence otherwise. The words “likely”, “maybe”, “possible”, “may have”, “could have” have been used a lot. We’re unlikely to ever know much fact about any of this unless Sony are legally forced to announce it to the world, not just government officials/organisations.
Flash
Someone said earlier that Microsoft were behind the attacks, then they we’re quickly shot down by someone else saying that a company the size of Microsoft woulnd’t do such a thing. Of course they are right.
Sony are giants also. They would not run the risk of not having government standard security.
ER_nut
Wow. So we lose our personal information to hackers, and then Sony hide behind this to not take full blame? Well, we did all agree to it I guess.
Flash
You will find that every company in this industry is the same…
Sting_HP
Exactly, which is why it is important to read the agreements that we accept for anything these days.
squashme
they cant hide their T&C’s not by law
squashme
they cant hide behind their T&C’s not by law
Flash
The only reason this happened is because of all the stuff recently with Hotz and lawsuits and Anon etc etc etc. Instead of doing a Microsoft, Sony actually want a clean system. For this they pay the price which we are seeing now.
It could have been anyone. If Microsoft we’re in Sony’s position now, they would have got hacked. Just the stupid little kiddies at Anon.
CdmanJak
just another fat cat corporation if my bank account goes empty its entirely my fault g wiz thanks sony!
moshi
Maybe a lesson to you all to read the small print next time.
hunterstryfe
even reading the small print does not really help, you STILL cannot sign up to PSN WITHOUT agreeing to T&C’s. So really you can either have a glorified PS2 or a PS3 that CAN go online with an agreement. Talk about the consumer having their hands tied behind their backs
rick_x
Is it just me or has anyone else NOT had an email from SCEE alerting them to the data theft and potential for credit card fraud? I had one from SCEA regarding my US account. Surely this amounts to Sony STILL not alerting their customers to the breach – they cannot rely on all customers finding
out through the specialist media like us?
squashme
I havent had 1 yet
jimmy-google
I’ve not had one from Japan, US or UK for my accounts.
The obvious questions are, have Sony got a better idea of which accounts have been effected and how long does it actually take to send out 75+ Million e-mails?
squashme
well it doesnt take long to tick the all box and click send maybe it takes 1 second or 2
jimmy-google
But it takes time to get through the e-mail systems. 75+ million e-mails with the same text may well be picked up as spam or an attack.
There are a lot of things put in place to prevent mass emailing on that scale.
squashme
true but apparently there sending them 1 by 1 according to the Japan PS website
adevow
Same here.Maybe it’s just US accounts at risk.
squashme
just got my email :)
jimmy-google
Got mine now too but only the EU one.
squashme
they stated the obvious that they turned off PSN last week lol something we all know
hazelam
the last email i had from sony was an ad for patapon 3.
hunterstryfe
I haven’t (THANK GOD!!) And I ain’t religious lol
toutski
No need for them to do anything but nothing to stop them making a nice gesture when this gets sorted.
squashme
I’m neither glue or human
alonemusic
all that statement really says is if someone breaks into your account, its the person who breaks in that is at fault and not Sony. Which, by and large is true.
squashme
how is that true ? how am I liable for hacking PSN and someone stealing everyones credit/debit crad details . thats Sony’s fault not mine not yours just Sony’s
alonemusic
no it is the person who made off with the datas fault. Sure sony can be fined for not protecting something well enough, but that has nothing to do with the end user seeing any reimbursement. Its sort of the same as leaving your coat in a public cloakroom where they say ‘any valuables here are not our responsibility’ just worded in tiny print that no-one read.
3shirts
Indeed but to use a tired old analogy; If someone breaks into my house and steals all my pants and it then turns out they got in because my alarm system didn’t work; The thief may be responsible for the crime but I would definitely want some compensation from the firm that fitted my alarms.
alonemusic
its awkward territory for sure, but unless there is an explicit warranty on say, your lock/alarm system, then no, they don’t have to give you anything, your insurance company would say the same, unless there is signs of a forced entry, which means you then would claim your losses from your insurance. Real world example, I had my bike nicked, the thieves cut the lock, insurance company said well, you shouldn’t have used a cuttable lock. (now I use a big metal D-lock).
In effect the statement says “we are not going to steal your data, but if someone does, then they are responsible”
squashme
but if the alarm didnt work how would that be his fault ? if he set the alarm properly thats not his fault if the alarm didnt go off that would the companys fault for not fitting it properly so hes entitled to compensation from them
alonemusic
because the alarm is merely a precaution to ward against theft, not the actual theft. Even if the security system was all laser beams sniffer dogs and sleepy guards, Tom Cruise still got in through the vents and he was the one responsible for nicking the computer discs and awesome rope shenanigans.
3shirts
Yes, and if it turns out Sony had the network equivalent of that room in MI then fair enough, not their fault. Just as, if the pants thief had evaded my alarms then ok.
BUT, if Tom Cruise had just snuck past a dimwitted guard and then strolled into the room, or my alarm just hadn’t gone off, then those are at fault.
hunterstryfe
Pants lol! anything funnier?
hazelam
assuming they took adequate measures to protect your account, yes, if they didn’t, they’re liable too.
the law states they have to protect our information, if they didn’t do enough to protect it, well then they’re soooo liable.
squashme
if the info is stored in the UK for the UK users then they will be in the UK thats why the ICO has got involved
The Lone Steven
That’s it, i am now going to look at the terms and conditions from now on.It is Sony’s responsablity to make sure that account holder’s details are safe.It is required the Data protection act that all date is keep safe.I know that companies know that we don’t look at the T&Cs so they can pull anything by claiming it was in the latest T&Cs.
hunterstryfe
Data Protection Act is to keep data confidential and not to share that information not actually keep it safe unfortunately