Pjstock wrote:
Raolan wrote:
Opening a new account isn't going to do anything. If your account was compromised, change the email address associated with it and change the password, opening a new account is pointless. Also, the CC info that was stolen from SOE was old, likely expired cards and it was a single breach, it's not an ongoing thing. If their were false charges made to your CC right after you used it, the issue is likely on your end.
That I am aware of, no one has ever been into my account. My password has been changed twice since Sony was hacked... In addition, the card used had the same number for a couple of years (CC/Debit card) and the only thing changed since SoE was hacked was a new expiration date and security number on the back of it. I had a PS3 with that information as well... A day after updating that information with SoE on my account, I was hit... While that is not solid proof that it was due to the hack on SoE a few months ago, it is the most likely culprit as I have not used that particular card on many other websites outside of paying for my student loans to the government. Thus, it is extremely difficult to see this as "on my end". While that is possible (somehow, someway), it is far more unlikely than the company that was hacked into... Quite a funny coincidence, not to mention timing if it were on my end.
The CCV number on the back of the card is meant to be used for validation, indicating that you do in fact have possession of that card, most companies don't store that information. Also, the CC numbers that were compromised were not those of US cards (assuming you're a US customer).
As far as you being compromised a day after using your card being an indication that it is on SOE's end, the exact opposite is true. It indicates that your system is compromised since it was just used on your system. Since you just used it and it was compromised, if we assume that is when it was compromised, it would have had to have happened one of three ways.
1. Your system has been compromised and it was recorded when you entered the details. This is the most likely scenario and I'll explain why in a minute.
2. It was intercepted in transmission. The most vulnerable part of this scenario would be if you were using an unsecured wireless connection, a public system, or a compromised system. The chances of it being intercepted between your ISP and SOE's servers is highly unlikely.
3. SOE's servers are actively being monitored and information is being stolen as it is entered. I won't go into how unlikely this is, other than to say that if it were happening, a hell of a lot of people would be experiencing the exact same issue you are.
Back to number one. Your posts and assumptions indicate you aren't very knowledgeable on the subject, which is perfectly understandable since most people aren't. Either your CC was compromised awhile ago and the false charges lining up with your use on SOE's servers is purely coincidence, or it was compromised when it was used. Assuming your most recent use was the time it was compromised, it would have to be a form of malware that actively monitors and communicates with its host system, which is something that does not go unnoticed on a corporate network, although goes unnoticed on users systems on a daily basis.
I spent enough time explaining to people how these things work when SOE was offline, I'm not doing it again. I'm simply informing you that your assumptions are highly unlikely and starting a new account is pointless. If you want to start a new one anyway, go ahead. If you want to use a time card or temporary online purchase number like OldBlue mentioned, go ahead. But don't blame a company for something you know nothing about. As someone who's studying infosec and has been building and securing SOHO networks on a personal level for more than a decade, the false information and unfounded assumptions are extremely grating on the nerves, especially when that false information is one of the main reasons so many people have compromised systems to begin with.