In a statement from its Tokyo headquarters, the company said it had “detected a large amount of unauthorized sign-in attempts” between Oct. 7 and Oct. 10, and had temporarily locked 93,000 accounts whose sign-on IDs and passwords had been copied by whoever made the attacks.
“Credit card numbers associated with these accounts are not at risk as a result of these unauthorized attempts,” the company said, adding that there had been little activity on most of them between the attack and Sony’s decision to lock the accounts.
It said it would email account holders with instructions so they can reset their passwords.
This all matters because it has happened before, and has had Sony struggling to recover in the past. After an attack in April (the shadow group Lulz Security took credit) the PlayStation network was offline for 44 days, and spent about $170 million to restart, and try to restore its relationship with its customers.
Customers are probably not at risk from an attack like this one, the security firm Sophos says, but it’s a reminder to do the little, basic things necessary to protect yourself. If you’re one of those 93,000 Sony customers, someone has now downloaded your password, which might become a problem if it is the same password you use, say, for your bank account.