If security expert Kevin Stevens of TrendMicro is correct, cybercriminals are offering 2.2 million credit card numbers stolen from the attack on the PlayStation Network. Stevens tweeted today that carder online forums are spreading the information, which allegedly includes users’ addresses, zip codes, country, phone numbers, email address with passwords, dates of births, credit card security numbers, expiration dates, and credit card numbers.
Stevens also tweated that Sony was “supposedly offered a chance to buy the DB back but didn’t.”
There are some 77 million PSN user accounts, and some have already started reporting fraud associated with their credit cards. One claim includes roughly $1,500 USD in a German grocery store charged to an American card.
The sale of these alleged PSN credit card information is not necessarily believable. For starters, Sony says credit card information is encrypted and the company does not store the security number. So who is lying, Sony or the cybercriminals selling alleged credit card information? It’s important to keep in mind that Sony is facing a slew of legal action, not only from citizens, but the company is also facing investigations from several countries.