Please share this everywhere, Sony has a huge security issue, what this is about:
- Attackers only need your public PSN ID plus one piece of old transaction data, so usually a full order number or the last four digits of a card you used on the account at any point in the past.
- They contact Sony support (or use the automated recovery tool) and provide that information as โproof of ownership.โ
- Sonyโs internal support system then lets them change the email address linked to the account and disable 2FA. No login is required on their end.
Yes you read that right, people can disable mfa and change your Playstation email account if they manage to fool the Sony support. This is a huge security issue... ๐
Note: Colin got this account back, but this is a bigger issue that needs to be addressed. This has apparently happened to a lot of people
With the help of my friends and connections at Sony, I got my account back. I want to thank everyone for their kind words, advice, and direction! It meant a lot.
I fully know I exercised advantages due only and exclusively to my stature in the PlayStation community and my many tethers to the mothership. These are absolutely not privileges many other people have. I simply must acknowledge that.
With that said, I know this has been happening to a lot of folks over time, and we've even covered it on Sacred Symbols on a few occasions. I will dive deep into the situation on the next episode, but rest assured I am already bending (and will continue to bend) the ears of who I can to hopefully help convince the powers-that-be that this is a real issue they have to contend with.
Thanks again.