• Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.

My PSN Account was Compromised

D

Dylan Sexbang

Banned
Woke up this morning to see 4 emails from PSN about adding funds and transactions, someone bought $160 worth of NBA shit on my old psn ID. So I signed into my PS3 to check on it. Luckily I didn't have any payment methods on this account. But there was someone's card attached to it, I deleted it and changed the password.

What do I need to do outside of that? I'm probably going to go around and change all my account passwords from Amazon to XBL. Do I need to contact Sony about the transactions? Account has been inactive since I started a new PSN and stuck with that one. I've had an XBL account since 2008, and I've never had a single compromise on it. Congrats Sony, happy to see you keeping secure.
 
B

benny_a

extra source of jiggaflops
Kyouko la Kill said:
I've had an XBL account since 2008, and I've never had a single compromise on it. Congrats Sony, happy to see you keeping secure.
Click to expand...
I'm pretty sure your password was just compromised instead of Sony having all their security breached just so someone can buy $160 of microtransactions in NBA 2k.
 
panda-zebra

panda-zebra

Member
card details were likely stolen, if you do nothing you might expect a knock at the door. best to get in there first.

blame sony if you like, but someone likely just brute-forced your password, or possibly you signed in to someone else's console once upon a time and that machine is where the action took place. could be a number of things, probably best to give it some thought before pointing fingers.
 
D

dapoktan

Member
why would this guy steal someone else's id, then add $160 bucks of his own money?... Did they steal that CC info from someone else?
 
A

AwesomeMeat

PossumMeat
I was waiting for the FIFA micro transactions. Looks like you get hit by the considerably more rare NBA micro transactions. Sorry it happened OP but it sounds like it could have been much worse.
 
N

NoblesseOblige

Banned
dapoktan said:
why would this guy steal someone else's id, then add $160 bucks of his own money?... Did they steal that CC info from someone else?
Click to expand...

If Sony is as dumb as SquareEnix was back in the day then the thief can get the account back with a call pretending they are the account owner and then provide them with the account information including card details last used to make a purchase. Hopefully that's not the case.
 
entremet

entremet

Member
These guys can't change PSN names, so don't expect two factor.

Sony is a joke with their online infrastructure.
 
sensui-tomo

sensui-tomo

Member
They're probably gonna trade the stuff they bought in nba to their real account, file a a chargeback with their real card, keep the stuff they bought on your account and leave you with the banned account, Call sony if you care about the account.
 
G

Gestault

Member
I truly don't understand why two-factor authentication hasn't at least been mentioned as something in the works. It would prevent so many of these sorts of situations.
 
H

HarryDemeanor

Member
I still can't believe they've made Plus mandatory and still don't offer any sort of two-factor security.

You'd think that would be a priority after that big breach.
 
J

Justified

Member
dapoktan said:
why would this guy steal someone else's id, then add $160 bucks of his own money?... Did they steal that CC info from someone else?
Click to expand...

I would assume so. Stole another PSN so it cant be tied back.

Next the thief would go on 2K sell a wack MyTeam Card for $160 (In VC), then buy it with the compromise account, thus transferring the VC
 
C

Camp1nCarl

Member
Yeah I had my PSN account compromised and someone bought a PsOne classic game and added there PS Vita to my account. I changed my shit ASAP and luckily Sony refunded me the money, but I'm glad I never trusted Sony with any cards and simply had some funds in my account. Kind of pissed I can't deactivate that random persons Vita from my account though, I try and it says I can only deactivate it from the Vita manually. Either way Sony's track record with security and no two-factor authentication is pretty shitty.
 
W

Weevilone

Member
panda-zebra said:
card details were likely stolen, if you do nothing you might expect a knock at the door. best to get in there first.

blame sony if you like, but someone likely just brute-forced your password, or possibly you signed in to someone else's console once upon a time and that machine is where the action took place. could be a number of things, probably best to give it some thought before pointing fingers.
Click to expand...

It's legit to blame Sony when they don't offer 2 factor authentication.
 
K

killroy87

Member
Is there a reason i can't log in to my account settings? This seems more like a bug than suspicious activity.

I went to PSN website to change my password (this thread reminded me). For some reason I was unable to log in. I tried every variation of a password that I could use, but nothing worked, which is weird. So I said whatever, and did the "forgot your password?" method of changing it. I did all that, went fine, but now I still can't log in, even with the new password I just created!

Long story short: Is anyone able to log in to their PSN account setting from the web?

Edit: Got it. Had to change my password with Firefox, Chrome wasn't doing it correctly. Weird.
 
H

Hentailover

Member
Contact SONY. If they get their money back from the bank, you will be banned, with no way to unban yourself without paying that money back to Sony. The policy on the chargebacks is strict.
 
C

Chrisdk

Member
I don't trust Sony at all and i'm kinda surprised that their lack of "security" isn't that big of a deal to people. It's rarely mentioned how little protection they offer us. Sometimes i feel like Sony gets a pass on a lot of things.

I'm using prepaid cards on my PS4.
 
sensui-tomo

sensui-tomo

Member
funny enough its almost always the sports games with those trading mechanics that are the games people hack other accounts for.
 
B

Birgitte2004

Member
Chrisdk said:
I don't trust Sony at all and i'm kinda surprised that their lack of "security" isn't that big of a deal to people. It's rarely mentioned how little protection they offer us. Sometimes i feel like Sony gets a pass on a lot of things.

I'm using prepaid cards on my PS4.
Click to expand...

Considering how easy it is to find posts about Xbox accounts being hijacked, I feel like Sony gets undue blame, as opposed to getting a free pass.
 
P

Palette Swap

Member
Wario64 said:
I'd contact Sony. Also, Sony get your shit together and offer two factor already
Click to expand...
Yup. It's 2016. At this point it's negligent to not offer the possibility.

Birgitte2004 said:
Considering how easy it is to find posts about Xbox accounts being hijacked, I feel like Sony gets undue blame, as opposed to getting a free pass.
Click to expand...
A few years ago, MS were kind of shit with the "FIFA hack" (most likely the result of CS social engineering), but at the very least they did eventually introduce two factor authent.
 
R

RhyDin

Member
Just curious, was your password one that was easily crackable - a common word/s with numbers, for example? I wonder if these accounts are social engineered or if people are just using silly passwords or being compromised some other way. When something like this happens and you can't tell how it happened, you should assume they have everything and change your other passwords immediately, especially to the e-mail associated with the account and any other accounts that used shared passwords or similar account names.

I wonder how Sony doesn't have something in place to lock an account after multiple login attempts, or at least to see that an account was attempted to be logged into multiple times erroneously - thus there would be no reason to "ban" the account due to a fraudulent purchase and subsequent chargeback.
 
Shpeshal Nick

Shpeshal Nick

aka Collingwood
Staggering that Sony still doesn't have 2 step.

I've activated for basically everything I have with money attached or videogame related.
 
D

diablo900t

Member
I had the same problem happen to me recently. Had to go through my credit card company to reverse the charges. A bunch of purchases over a period of a month.

They didn't make any other purchases with my CC linked to the account, just seemed to hack my PSN account. Never had any others hacked and have strong passwords.
 
J

Jacksinthe

Banned
Use Gmail and do the + thing.

name@gmail can be name+whateverthefuckyouwant@gmail and will deliver to name@gmsil

I have a unique + identifier, pw and 2-factor (where allowed) for every site. Now anyone can have my email and be SoL.
 
H

Head.spawn

Junior Member
AbsintheGames said:
Use Gmail and do the + thing.

name@gmail can be name+whateverthefuckyouwant@gmail and will deliver to name@gmsil

I have a unique + identifier, pw and 2-factor (where allowed) for every site. Now anyone can have my email and be SoL.
Click to expand...

You're going to have to explain this one, what?
 
R

Raimond

Member
In addition to the + trick with Gmail, you can also add a period "." anywhere within your email before the @ sign and they will all be sent to your same email. In this way you can sign up at a site multiple times or something like that, but still gets delivered to your same inbox.
 
D

Dylan Sexbang

Banned
AbsintheGames said:
Use Gmail and do the + thing.

name@gmail can be name+whateverthefuckyouwant@gmail and will deliver to name@gmsil

I have a unique + identifier, pw and 2-factor (where allowed) for every site. Now anyone can have my email and be SoL.
Click to expand...
Could you elaborate? I use gmail for my primary emails and this has me scratching my head. Please that is!
 
1

11redder

Member
Camp1nCarl said:
Yeah I had my PSN account compromised and someone bought a PsOne classic game and added there PS Vita to my account. I changed my shit ASAP and luckily Sony refunded me the money, but I'm glad I never trusted Sony with any cards and simply had some funds in my account. Kind of pissed I can't deactivate that random persons Vita from my account though, I try and it says I can only deactivate it from the Vita manually. Either way Sony's track record with security and no two-factor authentication is pretty shitty.
Click to expand...
I had an issue where a dude added his ps4 to my account as the primary. I called Sony and they reset all active systems on the account, after a few questions to make sure I really was the account owner. You should be able to do the same for the Vita.

No purchases were made on my account, I think he just wanted free access to my PS Plus games.
 
H

Head.spawn

Junior Member
Kyouko la Kill said:
Could you elaborate? I use gmail for my primary emails and this has me scratching my head. Please that is!
Click to expand...

Just messed around with it.

Say you have an email addy is something like: iam.a.jerk1@gmail.com

I tried sending mail to: iamajerk1@gmail.com - and that worked.
I also tried sending an email to: Iamajerk1+wut12314@gmail.com - and that worked as well.

'i.a.m.aj.er.k.1+neogafgoldaccount@gmail.com' also worked.

All emails sent, no matter how goofy you get with it, within those guidelines, were recovered under the original iam.a.jerk1@gmail.com account.

I'm ashamed to admit I had no clue this was possible. It would be amazing if it worked for other email addresses, like Hotmail or yahoo.
 
B

Blurry15

Member
Storm Raider said:
If you don't need that account at all, just do a chargeback. It will ban the account.
Click to expand...

This happened to my friend, is there really no way of getting around it? She called and she said that they told her she needs to buy PSN codes that equal X amount to get her account unbanned. Is that true? Does she seriously have to pay to get all those games she lost?
 
JSoup

JSoup

Banned
Blurry15 said:
This happened to my friend, is there really no way of getting around it? She called and she said that they told her she needs to buy PSN codes that equal X amount to get her account unbanned. Is that true? Does she seriously have to pay to get all those games she lost?
Click to expand...

Unless she get's really, really lucky with a rep, yeah, she's got to pay to get her account back.
 
S

SomTervo

Member
Why the hell are sports games so relenetlessly shit for this kind of stuff? I only ever hear about it from EA sports games. Is it EA?
 
E

Echoplx

Member
Head.spawn said:
Just messed around with it.

Say you have an email addy is something like: iam.a.jerk1@gmail.com

I tried sending mail to: iamajerk1@gmail.com - and that worked.
I also tried sending an email to: Iamajerk1+wut12314@gmail.com - and that worked as well.

'i.a.m.aj.er.k.1+neogafgoldaccount@gmail.com' also worked.

All emails sent, no matter how goofy you get with it, within those guidelines, were recovered under the original iam.a.jerk1@gmail.com account.

I'm ashamed to admit I had no clue this was possible. It would be amazing if it worked for other email addresses, like Hotmail or yahoo.
Click to expand...

Isn't this kinda pointless? all they'd have to do is remove everything after the + and they know your email anyway? Unless I'm missing something.
 
You must log in or register to reply here.

Similar threads

Just had to recover my PSN account, why?
6
581
Sushi_Combo replied
PSN is down or is it my account?
17
926
RCU005 replied
2023 and I'm unable to change my PSN account region
3
371
RavenSan replied
Quick Playstation Account Question
11
488
Ass of Can Whooping replied
Why gaming companies require personal info for accounts?
17
1K
theStartupSound replied
Top Bottom