The 2011 PlayStation Network (PSN) breach was a criminal intrusion into Sony’s network. Sony said attackers accessed account-related information between April 17 and April 19, hid their activity, and prompted the company to take PSN offline while it investigated. The available primary accounts describe the intrusion and its aftermath, but do not identify the exact exploit or how the attackers first got in.
What happened in the 2011 PSN hack?
In April 2011, attackers gained unauthorized access to servers connected with PlayStation Network and Qriocity, Sony’s online music service. Sony’s April 26 customer notice said account information had been compromised between April 17 and April 19. The company detected unusual activity, took PSN offline, and later rebuilt parts of its network and added security measures.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Sony Playstation 3 160GB System (Renewed) | $201.94 | Buy on Amazon |
| 2 |
|
Sony PlayStation 3 Slim 320 GB Charcoal Black Console (Renewed) | $216.30 | Buy on Amazon |
| 3 |
|
PlayStation 3 Slim Console 120GB (Old Model) (Renewed) | $175.99 | Buy on Amazon |
| 4 |
|
PlayStation 3 500 GB Super Slim System (Renewed) | $211.11 | Buy on Amazon |
| 5 |
|
Sony PlayStation 3 - 80GB System (Renewed) | $217.22 | Buy on Amazon |
The incident affected personal information associated with approximately 77 million PSN and Qriocity customers, according to the Australian Office of the Information Commissioner (OAIC). That figure describes accounts associated with the services; it does not establish that every account’s data was viewed or taken.
How did the attackers get in?
The public primary records cited here do not specify the initial access method. They do not establish a particular unpatched application, SQL-injection attack, stolen password, or named individual as the way the intruders entered. Sony characterized the attack as carefully planned and highly sophisticated, but that description is not an explanation of the exploit chain.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →#1 Best Overall
- Internet Ready With Built-in Wi-Fi with a Cell Broadband Engine Advanced Microprocessor
- When starting up the system for the first time, hold the power button until a "screen display" message shows up on screen. Select the desired output, and the system will startup normally.
- 160GB system
- Blu-ray player to give you pristine picture quality
- The best high-definition viewing experience available
What the records do describe is activity after access: attackers used sophisticated techniques, hid their presence from system administrators, and deleted log files, according to an account of forensic findings published by the Office of Senator Richard Blumenthal. Sony also told Congress that a file named “Anonymous,” containing the words “We are Legion,” had been planted on a Sony Online Entertainment server. That evidence indicates deliberate concealment, but it does not identify who was responsible for the PSN intrusion or how access began.
What information was exposed?
Sony said it believed attackers obtained the following account information:
Rank #2
- New slimmer, lighter PS3 system, Wireless controller
- 320GB HDD for storing games, music, videos, and photos
- Streams thousands of movies and TV shows instantly from Netflix
- Built-in Blu-ray player with 3D capabilities. HDMI output for 1080p resolution.
- Name
- Address details and country
- Email address
- Date of birth
- PSN login and password
- PSN online ID
Sony also said purchase history, billing address, and answers to password security questions might have been accessed. The company warned that it could not rule out access to credit-card numbers and expiration dates, but said it had no evidence at that time that card data had been taken. The card security code was not included in Sony’s warning.
So the careful answer to “Did hackers steal credit-card information?” is that Sony could not rule out access to card numbers and expiration dates, but reported no evidence that they had been taken. The public warning specifically excluded the security code.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- HDMI + Bravia Sync functionality that provides both 1080p output resolution.
- A new 33% slimmer, 36% lighter PlayStation 3 entertainment system that is also more energy efficient.
- Includes a Dualshock 3 wireless controller and a built-in 120GB HDD for storing games, music, videos, and photos.
- Built-in Wi-Fi for connectivity anywhere and multiple media format compatibility.
- Free membership and access to all the events, as well as game, movie, TV and other media content available on the PlayStation Network (PSN).
How the breach unfolded
| Date | What happened |
|---|---|
| April 17–19, 2011 | Sony said PSN and Qriocity account information was compromised during an illegal, unauthorized intrusion. |
| April 19 | Sony’s network team discovered unexpected server reboots and unusual activity. Sony’s European operation also became aware of the cyberattack. |
| April 20 | Sony shut down PSN services to prevent further unauthorized activity and began a larger investigation. |
| April 21–23 | Additional forensic firms imaged servers. Investigators found hidden activity and deleted log files, according to the Senate account. |
| April 25 | Forensic teams confirmed the likely scope of personal information accessed but could not rule out credit-card access. |
| April 26 | Sony publicly notified customers that personal information had been compromised and warned that card numbers and expiration dates might have been accessed. |
| May 1–2 | Sony Online Entertainment discovered that data might also have been taken and shut down its service. |
The dates come from Sony’s notices and congressional response, the OAIC’s account, and the Senate account of the forensic investigation. The PSN and Sony Online Entertainment incidents should not be collapsed into a single service outage: the latter’s discovery and shutdown came later.
What Sony did in response
Sony temporarily disabled services, brought in outside security firms, and rebuilt network infrastructure. The company described measures that included stronger encryption, intrusion detection, monitoring for unusual activity, firewalls, a new data center, and the appointment of a chief information security officer. It also offered identity-theft protection and a “Welcome Back” package to customers.
Rank #4
- Your Favorite Franchises Live Here: Dig into a huge catalog of exclusive games, including generation defining titles like The Last of Us and entries in popular franchises like LittleBigPlanet, God of War, Gran Turismo, and UNCHARTED.
- High-Definition Blu-ray player for the best movie experience. Plays DVDs and CDs
- 500GB HDD for storing games, music, videos, and photos
- Internet ready with built-in Wi-Fi
- Blu-ray player
Containment and remediation are separate from the question of how quickly affected people were told. The OAIC later accepted that reasonable security steps appeared to have been taken and closed its investigation, while recommending that Sony review the time elapsed before notifying customers. The regulator’s conclusion therefore acknowledged security work while still raising a concern about notification timing.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the public record can—and cannot—tell us
The evidence supports a clear account of unauthorized server access, concealment, the categories of information involved, the shutdown, and Sony’s response. It does not provide a confirmed initial exploit path or show that every affected account’s information was actually accessed. Nor does Sony’s warning establish that credit-card data was stolen: it says access could not be ruled out, while noting that no evidence of card data being taken had been found at that time.
Quick Recap
Best Value
- Built-in Wi-Fi access for easy connection to gaming services and the Internet
- Built-in Blu-ray player to give you the best high-definition viewing experience and pristine picture quality
- 80 GB of hard disk storage for all your games, music, videos, and photos
- This product is NOT backwards compatible
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
