The problems keep coming for Sony. On Tuesday the company confirmed that someone had hacked into its website and stolen about 2,000 names and e-mail addresses of mobile phone customers.
Close to 1,000 of the records have already been posted online by a hacker calling himself Idahc, who says he’s a ‘Lebanese grey-hat hacker.’ Idahc found a common Web programming error, called an SQL injection flaw, that allowed him to dig up the records on the Canadian version of the Official Sony Ericsson eShop, an online store for mobile phones and accessories.
The hacker got access to records for about 2,000 customers, including their names and e-mail addresses and a hashed version of users’ passwords, said Ivette Lopez Sisniega, a Sony Ericsson Mobile Communications spokeswoman. “Sony Ericsson has disabled this e-commerce website,” she said in an e-mail message. “We can confirm that this is a standalone website and it is not connected to Sony Ericsson servers.”
Other than the names and e-mail addresses, no personal or banking information was compromised, she said.
Sony Ericsson is a mobile-phone company run jointly by Sony and Ericsson.
Sony has been under continual cyber-attack since April, when its PlayStation Network was hacked and then pulled offline. Over the past week Sony BMG Japan, Sony BMG Greece, the Sony-run So-net Internet service provider, and a company server in Thailand all have been compromised, in what’s becoming a free-for-all online attack on anything belonging to Sony.
IDG News Service
Subscribers 0
Fans 0
Followers 0
Followers