KoudelkaMorgan said:
The main thing is that the hacker has all the details now, all in one neat little package. I know lots of people, especially here, were going "SHIT, CANCEL ALL CARDS, MOVE HOUSE, BUY GUNS, THE HACKERS ARE COMING". But really the main threat is the people who are not so cautious. With that information they can send out e-mails and make telephone calls saying:
"Hello Mr Jones, Sony here. As you may be aware the Playstation Network was compromised earlier this month and users account details here compromised."
"Oh mah gawd!"
"Yeah I know right, lol. Anyway we here at Sony are working hard to ensure users accounts are not compromised. Now, with your help I will just make sure your account details are not being used against you. ok?"
"OK, when will I be able to play Call of Duty online?"
"Soon, lol. So just to confirm this is you, are you Charles Jones of 13 Noob Street?"
"Yeah"
"Ok, one more security question. What is the three digit security number on the credit card you used with us?"
"errrm, 735."
"Thanks. Really, thank you Sir."
It is that simple. Of course it is easier, cheaper, though less convincing to send out thousands of e-mails asking pretty much the same thing. Which is why Sony said "WE will NEVER ask you for your personal details".
Maybe this will never happen but it is possible, especially if they managed to figure out the Credit Card numbers and expiry dates (which there is no evidence of yet).