updated 11:25 am EDT, Mon May 23, 2011
Intrusion took place May 5th
Sony's website security problems continue to mount. The Hacker News has provided details of a hack of Sony Music Greece's website that took place on May 5. A sampling of the hacked data was posted on the sharing site pastebin. The personal data posted appears to be incomplete.
The hacking was accomplished using an automated SQL injection tool. It was not a sophisticated hack, but rather a continuous prodding of Sony websites until a vulnerability was found.
This is the seventh invasion of a Sony customer database that has been reported since late April. Sony Online Entertainment, SONet, and even the password reset site for returning PSN users were either hacked or had known exploits.
The financial impact on Sony from the PSN hack has compounded its problems. The company just released financial results for its fiscal year ending March 31. Sony reported a loss of $3.2 billion. A significant portion, was an allocation to offset anticipated losses as a result of the recent earthquake and tsunami catastrophe. However, $171 million was directly attributed to the direct costs and and proactive customer retention programs attributed to the hacking.
The Greek Sony Music website is currently unavailable.