Your PlayStation 5 & PlayStation Network Account Is At Security Risk; Here’s Why

Just when you thought Sony Interactive Entertainment and the PlayStation 5 couldn’t be thrown into more hot water (Bungie overspending, live service games cancellation, little to no exclusives, price hike, and so forth), along comes this conundrum.

Colin Moriarty, a prominent video game podcaster and business owner of Last Stand Media, recently had his longtime PlayStation Network account compromised. While he is incredibly lucky in getting it back after much back-and-forth, the same cannot be said for a good number of loyal PlayStation users who had their accounts stolen, through no fault of their own. This is especially since most people do not have the contacts & networks the Last Stand Media founder has.

The reality is even more depressing. Sources who have confided in Moriarty & Last Stand Media have pointed out that PlayStation has allegedly employed the cheapest support agents in random parts of the world. They do not enforce certain security processes on these support agents, thus leaving them with a gaping security hole in their support system that is easily exploitable. See, you can possibly commandeer someone’s PSN account by taking advantage of customer service representitves who would hand it over with just a few pieces of information, like: 

  • A PSN username
  • An associated e-mail address
  • A transaction ID or purchase date

This is the equivalent of getting a customer’s full Grab account with all private details by just showing customer service the last Jaya Grocer receipt of any purchase; the one most people would just throw away. Yes, it is that ludicrous.

User PorkPoncho has put this to the test (via PushSquare.com).

And yes, you can easily get this info from publicly available Trophy data; if you start earning trophies in Pragmata a few days ago, for example, you may have bought it on the same day. With enough attempts and with a sympathetic enough support agent, you can hijack someone else’s account and then change everything inside: email addresses, disabling two-factor authentication, remove passkeys.

This raises a series of larger questions: How is PlayStation Network security handled in the wake of the 2011 worldwide PlayStation Network breach? How far back does this current level of incompetence go? And if a PSN account is hijacked and boosted, why not just outright shut it down?

Keep in mind that this problem isn’t a US region-based issue; it affects every user on a worldwide scale, including Southeast Asia and even PlayStation Asia. Prominent trophy hunter Hakoom was never able to recover access to his account, and unfortunately he is one of the many without the same mothership access to PlayStation folks like Moriarty.

There is no way the company is oblivious to this for such a long period of time. Sony really needs to make serious and immediate efforts to secure people’s accounts on PlayStation Network. And while it is a long shot, help re-unify people with their stolen accounts.

I am well aware that Southeast Asia is the region where PlayStation Network and PlayStation support is arguably the biggest in terms of first-party game companies. The passionate support is big for Sony and co. to the point where some supporters are either too oblivious that their favourite company can be in the wrong, or that they know about this and choose to turn a blind eye.

I ask you this: how would you feel if your 20+ year old PlayStation Network account was stolen out of the blue and compromised through no fault of your own?

Check out the video below for the Last Stand Media’s Sacred Symbols portion detailing the hack and compromise:

Leave a Comment

Leave a Reply

Your email address will not be published. Required fields are marked *