Back to the archive

The encyclopedia · Software & IT · Operational decision · 2011

Sony's PSN breach exposed 77M accounts — and the network was down 23 days

In April 2011, hackers breached Sony's PlayStation Network, exposing 77M accounts. The network was down for 23 days. Sony paid $171M in costs.

Sony · 2011-04

What happened

In April 2011, Sony's PlayStation Network (PSN) and Qriocity music service were breached by hackers who stole the personal data of approximately 77 million user accounts — names, addresses, email addresses, passwords, and in some cases, credit card numbers.

Sony took the PSN offline for 23 days while it investigated and rebuilt its security infrastructure. The outage was the longest in the history of a major gaming platform, and it affected millions of gamers worldwide who could not access online multiplayer, digital purchases, or their account data.

Sony paid approximately $171 million in costs related to the breach, including customer compensation, security upgrades and legal settlements. The case illustrated how a gaming platform's always-online architecture creates a single point of failure, and how the delay in disclosure (Sony waited over a week to inform users) compounds the damage.

Why it happened

  • Hackers breached PSN and stole 77M user accounts' personal data.
  • The network was down for 23 days — the longest outage of a major gaming platform.
  • Sony waited over a week to disclose the breach to users.
  • Sony paid $171M in costs; the breach damaged the PlayStation brand.
What it cost77M accounts; 23-day outage; $171M in costscostly

The lesson

An always-online platform is a single point of failure for its entire user base. PSN's 23-day outage affected millions. In a connected platform, the outage is the incident.

Aftermath

Sony rebuilt PSN's security infrastructure and offered free identity theft protection to affected users. The case prompted the gaming industry to strengthen platform security and influenced breach notification practices.

Sources

spotted an error? The club wants to know.

Comments · 0

    Sign in to join the comments.

    More like this

    Somewhere, someone solved the problem this company failed at. 2nd Opinion →