Sony's cyber-attack investigated by the Australian Privacy Commissioner

On 19 April 2011, Sony became aware that hackers had gained access to their Network Platform which held personal information, including contact and credit card details, of approximately 77 million customers world-wide. Amidst concerns that Australians' personal information may have been compromised in the cyber-attack, the Australian Privacy Commissioner commenced an own-motion investigation into whether Sony complied with National Privacy Principles 2.1 and 4.1 under the Privacy Act.

The Commissioner found that Sony did not breach National Privacy Principle 2.1 which only allows disclosure of personal information for the purpose it was collected, as the release of information was not intended by Sony, but rather the result of a 'sophisticated security cyber-attack' against Sony's Network Platform.