Play Network

What organization and technical failures led to the April 2011 data breach on the PlayStation Network?

One of the problems that cause this failure at Sony was that play station network was using the older version of apache web server software that had well known security issues which for a big operation like Sony data encryption is needed to protect their customers. Another reason was that Sony’s websites had very poor firewall protection which was reported months before the incident. Usually security breaches are result of management failure to take care of security risk, unwillingness to spend expensive security measures, lack of training, and outdated software. For example Sony has been criticized for the fact that the hackers have apparently been able to copy the data directly, implying it was not encrypted.

Can Sony be criticized for waiting 3 days to inform the FBI?

Yes, even though Sony was a victim of this attack but trying to protect themselves and their reputation or what other reason they were suppose to report this immediately. Protecting individual’s personal data is the highest priority and ensuring their privacy is also essential. They should take responsibility for obligations to their customers and work with FBI to solve the issue right away. Of course because of this and other similar issues there are now new policies issued by government for organizations to protect the individuals. For example data accountability and trust act of 2011; it requires firms to establish security requirements, notifying individuals immediately and major credit cards.

...