Astoria said:
I've been wondering this too. It's hardly like Sony said hey here's all our information have it.
Actually, this is
exactly what happened. The hackers didn't seize Sony's server buildings and take hard drives by force. They asked nicely (in computer protocol terms) and Sony's servers sent them the entire motherlode. Sony has total power over, and responsibility for, what their servers do.
First off, any IP asking for more than one account should have been a red flag. A huge unprecedented spike in account details should've been a bigger red flag.
Second off, no account data should've been given without the user password. Said password should never have been stored, only hashed.
Third off, no server accessible to the outside should have credit card numbers, let alone send them to anyone except the credit card system.
Sony alone is responsible for the security hole in PSN they created. No modded chip, no one special number should have allowed access to millions of users' account details.
And, yes, the hackers should be caught, convicted, and incarcerated for taking advantage of this.