Sony fined £250,000 following hacking attack
Sony operated the PlayStation network platform, and was the data
controller in respect of the personal data provided by customers
when they created an account to access the network platform. The
network platform, including customer databases, was administered
and maintained on Sony's behalf by a US service provider (which
was part of the Sony group). The network platform was used by
millions of customers in Europe, the Middle East, Africa, Australia
and New Zealand. The network platform was infiltrated following
hacking attacks on various online networks of the Sony group. The
attacker accessed personal data stored on the network platform,
including millions of customers' names, addresses, email
addresses, dates of birth and account passwords. The incident was
voluntarily reported by Sony to the ICO.
