Attacks/Breaches
5/26/2011
05:44 PM
50%
50%

More Sony Problems Reported; Company Launches ID Theft Service

Debix gets the call to help thousands of PlayStation Network users affected by breach.

Amid further reports of compromises, Sony said yesterday that it has launched an identity theft protection offering for users who might have been affected by the breach of its PlayStation Network earlier this month.

Sony has brought in Debix to offer the AllClear ID PLUS identity theft protection program, which will be offered to PlayStation Network and Qriocity customers who are concerned about the exposure of their personal data in the hack of the network earlier this month.

"AllClear ID PLUS is a premium identity protection service that uses advanced technology to deliver alerts to help protect you from identity theft," Sony told users in a blog. "The service also provides identity theft insurance coverage and hands-on help from expert fraud investigators." Users who have been on the PlayStation Network since April 20 will be eligible for a free year of the service.

Sony on Tuesday reported yet another security breach, saying 8,500 user accounts had been compromised.

The breach, which occurred through Sony Music Entertainment Greece, affected artist websites where fans can sign up for newsletters. The sites were taken down immediately, the company said. The compromised records contained email addresses, phone numbers, user names, and passwords.

The sites, which were hosted by a third party, will be relaunched after a security review, the company said.

The news of the hack in Greece follows the report of vulnerabilities found on the Sony website in Japan.



Read the rest of this article on Dark Reading.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-2130
Published: 2015-03-05
Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka B...

CVE-2014-9688
Published: 2015-03-05
Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users.

CVE-2015-0598
Published: 2015-03-05
The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693.

CVE-2015-0607
Published: 2015-03-05
The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a connecti...

CVE-2015-0657
Published: 2015-03-05
Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCur69192.

Dark Reading Radio
Archived Dark Reading Radio
How can security professionals better engage with their peers, both in person and online? In this Dark Reading Radio show, we will talk to leaders at some of the security industry’s professional organizations about how security pros can get more involved – with their colleagues in the same industry, with their peers in other industries, and with the IT security community as a whole.