The ongoing saga regarding the breach and shutdown of the PlayStation Network has seen another update today, with Sony informing users that a mandatory password change will be coming when the service returns.
"We are working on a new system software update that will require all users to change their password once PlayStation Network is restored. We will provide more details about the new update shortly," stated Sony spokesman Patrick Seybold in a new Q&A on the US PS Blog.
The company is also now working with law enforcement in addition to the security firm it hired in the early days of the breach to bring those responsible for the PSN intrusion to justice.
"This malicious attack against our system and against our customers is a criminal act and we are proceeding aggressively to find those responsible," wrote Seybold, echoing statements made by Sony yesterday.
He also went to the defense of the console maker in regards to the security measures that protected users’ credit card and personal information prior to the breach:
"All of the data was protected, and access was restricted both physically and through the perimeter and security of the network. The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack."
Even though there was no evidence, Seybold later acknowledged that Sony "cannot rule out the possibility" that credit card information was actually stolen. He also offered some insight into what Sony plans to do to make personal information more secure in the future in an attempt to ease user worries.
"Moving forward, we are initiating several measures that will significantly enhance all aspects of PlayStation Network’s security and your personal data, including moving our network infrastructure and data center to a new, more secure location, which is already underway," Seybold wrote. "We will provide additional information on these measures shortly."
Finally, Seybold reiterated his claim yesterday that Sony hopes to get the PSN service back up by next Tuesday, but this time added that the timetable is not a guarantee.
