Sony Mega-Breach Spotlights Data "Security" Myths

Sony's unenviable status as the victim of the record theft of 77,000,000 individuals' personal information underscores a reality that the on-line business community would like its army of customers to forget: it's not just that the so-called "hackers" can be very good at what they do, it's that the appointed guardians of legally protected personal information are not necessarily awake at the switch. Two weeks after this "illegal and unauthorized" intrusion -- which took place sometime between April 17 and April 19, there is still no confirmation that Sony's PlayStation and its related service, Qriocity, had adequate (or any) security. 

There have been numerous suggestions that the PlayStation's basic encryption of protected personal information was weak or non-existent. What other explanation could there be for Sony blogging to its customers that it might be able to restore "some services within a week" than an apparent mad scramble at Sony to create a secure