Watch out for PlayStation fraud!

As hackers steal 77 million gamers' personal details, we explain how to avoid this robbery.

When you're playing online war-games such as the best-selling Call of Duty 3, being blown up, shot or zapped is all part of the action. However, what you don't expect is to be robbed of real money!

Sony PlayStation Network hacked

Alas, that's exactly the problem facing users of the Sony PlayStation Network (PSN) and Sony's Qriocity music and movies service, thanks to an external attack by hackers.

According to Sony's official statement on its PlayStation website, the PSN and Qriocity were attacked by hackers between 17 and 19 April, through an 'illegal and unauthorised intrusion'. As a result, the PSN has been out of action for more than a week.

What's more, Sony has now admitted that these hackers have stolen personal and financial details of up to 77 million PSN gamers, leaving them at high risk of financial fraud. The Japanese electronics giant has employed an outside security firm to investigate this attack but, for now, the PSN remains temporarily closed.

What was stolen?

According to Sony, hackers have stolen the following personal data provided by an unknown number of PSN users:

name;
address (city, county, country, postcode);
email address;
date of birth;
PSN/Qriocity passwords; and
login and handle/PSN online ID.

In addition, it's possible that profile data, including purchase history and billing address, and PSN/ Qriocity password security answers may have been pinched.

Sony also warns, "While there is no evidence that credit card data was taken at this time, we cannot rule out the possibility."

Hence, the credit/debit card numbers and expiration dates of PSN and Qriocity users could now be in hostile hands. However, CCV2 numbers (Card Verification Value; the three-digit security code on the back of plastic cards) have not been stolen.

Am I at risk?

Without doubt, this is one of the biggest breaches of computer security on record. According to Financial Fraud Action UK (FFA UK), three million of the 77 million registered PSN/Qriocity users are based in the UK.

Follow these top tips to protect yourself against ID fraud

However, one bonus for worried PSN users is that the hackers did not manage to steal any CVV2 numbers. As CVV2s are all-but-compulsory for 'cardholder not present' transactions, this will limit the hackers' ability to use stolen credit cards over the Internet, by mail, or over the phone.

Nevertheless, the theft of personal and financial data on such a vast scale is very serious, as it could lead to a wide range of frauds being committed in the weeks and months to come.

What should I do?

Sony has warned users to watch out for email, telephone and postal scams that ask for personal or sensitive information. Also, Sony will not contact you in any way (including email) seeking any sensitive, personal or financial information, such as card numbers, National Insurance numbers, tax details, nor any other data. Therefore, any such requests are sure to be fraudulent.

Also, if you use your PSN/Qriocity username or password for other unrelated services or accounts, then it would be wise to change them ASAP. Otherwise, the Sony hackers could use your PSN/Qriocity details as a key to access other accounts, such as credit cards and bank accounts.

In addition, you should pay very close attention to your account statements over the coming months. Watch out for any signs of suspicious activity, identity theft or other financial fiddles. If you are suspicious, you can dig deeper by obtaining a copy of your latest credit report.

You can sign up for a free credit report from Experian. Just remember to cancel your membership before the 30-day trial period is up to avoid being charged in the future.

Related how-to guide

Avoid scams and rip-offs

Worried about getting caught out by a scam or rip-off? Find out how to protect yourself.

See the guide

The FFA has confirmed that customers should not contact their bank or card company at this stage. Banks and card issuers will be watching out for suspicious or irregular card transactions. If card details have been compromised, then card issuers can place alerts on these accounts to prevent fraud. If necessary, issuers can block accounts or issue new cards.

Visa Europe has issued the following statement:

"Concerned cardholders should keep a close eye on their accounts and report any unusual or unexpected activity to their issuing bank. Cardholders who are innocent victims of fraud will get their money back, subject to the terms and conditions of their bank."

For more information on how to stay safe from fraud, visit the Financial Fraud Action website.

What next?

Until Sony brings the PlayStation Network and Qriocity service back online, gamers cannot buy, download or play games online. Already, I've met a few gamers who are having 'withdrawal symptoms' from not being to play on the PSN, which was launched in the autumn of 2006.

In the meantime, Sony has urged users to change their passwords when the PlayStation Network and Qriocity services are eventually restored. Its engineers are 'working around the clock' to being these services back online, protected by beefed-up security features.

Nevertheless, the technology firm has suffered a serious public-relations setback this week -- something it could well do without in the aftermath of the recent tragic events in Japan.

More: Find cracking credit cards today! | We’re being conned on our current accounts | The multi-car insurance rip-off