UK’s ICO Fines Sony Over 2011 Data Breach
Author: admin | Category: Cyber Security, Featured, Information Security | Leave a Comment
The UK’s Information Commissioner’s Office (ICO) has imposed a GBP 250,000 (US $395,000) fine against Sony Computer Entertainment Europe for violating the country’s Data Protection Act. In April 2011, the personal information of millions of UK citizens was exposed after hackers gained access to the Sony PlayStation Network’s systems. The ICO launched an investigation that determined that the compromise could have been prevented if Sony had kept its software
patched and adhered to best practices, including hashing and salting sensitive data. Deputy commissioner and director of data protection for the ICO David Smith said that Sony “is a company that trades on technical expertise, and there’s no doubt in my mind that they had access to both the technical knowledge and the resources to keep this information safe.” Sony plans to appeal the ruling.
Sony fined over ‘preventable’ PlayStation data hack