Sony to appeal £250,000 fine for hack into PlayStation Network
Sony Computer Entertainment has been fined £250,000 for a hack on its PlayStation Network that compromised the personal details of millions of its users.
Sony PlaySation: Sony fined £250,000 for hack into the network
The decision is being disputed by Sony, which is planning an appeal after "strongly disagreeing" with the ruling by the Information Commissioner’s Office (ICO).
Sony is objecting to the fine, citing that the ICO admitted the hack in 2011 was a determined criminal attack, that there was "no evidence that encrypted payment card details were accessed" and "personal data is unlikely to have been used for fraudulent purposes".
A Sony spokesman said: "Criminal attacks on electronic networks are a real and growing aspect of 21st century life and Sony continually works to strengthen our systems, building in multiple layers of defence and working to make our networks safe, secure and resilient."
The ICO imposed the fine after ruling that Sony breached the Data Protection Act by not putting sufficient safeguards in place to protect users of the Sony PlayStation Network.
Sony was victim to Distributed Denial of Service (DDoS) attacks in April of 2011 that also compromised information including the passwords, names, addresses, email addresses, and dates of birth of PlayStation Network users.
Although there was no evidence encrypted payment card details were accessed, Sony was reprimanded because details including passwords will have been used by people to control other online accounts and services.
The investigation found the attack could have been prevented if Sony had updated its software, while the electronics firm was also guilty of not anticipating an attack on systems, despite being subject to server DDoS attacks before the April 2011 incident.
David Smith, deputy commissioner and director of data protection at ICO, said: "If you are responsible for so many payment card details and log-in details, then keeping that personal data secure has to be your priority.
"In this case, that just didn't happen, and when the database was targeted – albeit in a determined criminal attack – the security measures in place were simply not good enough.
"There's no disguising that this is a business that should have known better. It is a company that trades on its technical expertise, and there's no doubt in my mind that they had access to both the technical knowledge and the resources to keep this information safe."Follow @mattchapmanuk
This article was first published on marketingmagazine.co.uk
Latest jobs Jobs web feed
- senior planner > SPORTS BRANDS collectivo Up to £90,000 plus benefits, London
- Head of Media, Marketing & Communications PGA Competitive, Sutton Coldfield, West Midlands
- Account Director- Exciting Online Content Marketing Company- Up to £70,000 plus OTE Cedar Scott Up to £70,000 basic (up to £90,000 OTE) plus share options, Central London
- ACCOUNT DIRECTOR/SENIOR ACCOUNT DIRECTOR - BTL/SP/Brand Experience - London - £45 - £55k plus bonus Judi Patton £45K-55K plus bonus, London/Greater London
- Senior Planning Director, International Agency, London, to £120k Fill Recruitment Ltd to £120,000, Central London
- Head of Customer Analytics - Consultancy Harnham £90000 - £100000 per annum + benefits, London
Integrated digital marketing offers huge opportunities to engage, servic...
Mobile marketing is coming of age, and the pace of change is now exponen...
With UK consumers spending an average of £1,083 a year online, int...
Conversational Mobile Marketing: Engage Customers and Empower Advocates (Expert Reports) External website
The pressure is on for marketers and mobile operators to embrace a strat...
As a nation, the UK is media and technology obsessed with over half of t...
All customers have the potential to become your brand advocates, driving...