While Sony discovered that hackers had broken into their Playstation Network on April 19, it wasn't until nearly a week later that the company understood the full scope of the breach, a Sony official tells Kotaku.
The company learned that customer data was stolen on Monday, only after an outside security firm conducted days of forensic analysis, Sony said.
Speaking to Kotaku tonight, SCEA spokesman Patrick Seybold explained the apparent delay in notifying customers.
"There's a difference in timing between when we identified there was an intrusion and when we learned of consumers' data being compromised," Seybold said. "We learned there was an intrusion April 19th and subsequently shut the services down.
"We then brought in outside experts to help us learn how the intrusion occurred and to conduct an investigation to determine the nature and scope of the incident. It was necessary to conduct several days of forensic analysis, and it took our experts until yesterday to understand the scope of the breach. We then shared that information with our consumers and announced it publicly this afternoon."
Two words: Epic. Fail.
Sony clearly needs to take a step back and reassess if it really wants to be in the modern video game console business. I am really shocked with how long Sony is claiming it's taken their mercenary security experts to discover the leak of customer data. I do not think i will be renewing my PSN+ subscription and will certainly ensure there are no credit card details entrusted to Sony going forward.