Sony's PSN breach exposed 77M accounts — and the network was down 23 days

In April 2011, Sony's PlayStation Network (PSN) and Qriocity music service were breached by hackers who stole the personal data of approximately 77 million user accounts — names, addresses, email addresses, passwords, and in some cases, credit card numbers.

Sony took the PSN offline for 23 days while it investigated and rebuilt its security infrastructure. The outage was the longest in the history of a major gaming platform, and it affected millions of gamers worldwide who could not access online multiplayer, digital purchases, or their account data.

Sony paid approximately $171 million in costs related to the breach, including customer compensation, security upgrades and legal settlements. The case illustrated how a gaming platform's always-online architecture creates a single point of failure, and how the delay in disclosure (Sony waited over a week to inform users) compounds the damage.

Sony paid $171M in costs after a 23-day outage, the longest for a major gaming platform, because its always-online architecture made the breach a single point of failure.

Hackers breached PSN and stole 77M user accounts' personal data.

The network was down for 23 days — the longest outage of a major gaming platform.

Sony waited over a week to disclose the breach to users.

Sony paid $171M in costs; the breach damaged the PlayStation brand.

An always-online platform is a single point of failure for its entire user base. PSN's 23-day outage affected millions. In a connected platform, the outage is the incident.

Sony rebuilt PSN's security infrastructure and offered free identity theft protection to affected users. The case prompted the gaming industry to strengthen platform security and influenced breach notification practices.