The news of the PlayStation Network’s security breach has reached Capitol Hill. Senator Richard Blumenthal of Connecticut has written a public letter to the President and CEO of Sony demanding answers in regards to the theft of personal information and more specifically the company’s failure to notify its users of the security breach. “I am troubled by the failure of Sony to immediately notify affected customers of the breach and to extend adequate financial data security protections,” he wrote.
The data breach took place on April 20, and the first confirmation to users any type of data may have been compromised went out today, six days later. “Although the breach occurred nearly a week ago, Sony has not notified customers of the intrusion, or provided information that is vital to allowing individuals to protect themselves from identity theft, such as informing users whether their personal or financial information may have been compromised. Nor has Sony specified how it intends to protect these consumers.” The security breach is suspected to affect up to 75 million customers.
“When a data breach occurs, it is essential that customers be immediately notified about whether and to what extent their personal and financial information has been compromised.”
He concluded his letter by saying, “PlayStation Network users deserve more complete information on the data breach, as well as the assurance that their personal and financial information will be securely maintained. I appreciate your prompt response on this important issue.” I can’t help but agree, I have personal information stored on the PSN, and I want to know how Sony is protecting it.
Blumenthal also called for Sony to make some quick changes. For one, Sony should provide PSN users with financial data security severs with free access to credit reporting services. This free service would need to be available for at least two years. Sony would foot the bill for these services. He also argues that Sony should offer affected consumers with insurance to protect them from possible financial problems caused by identity theft.