Sony BMG Greece Website Hacked, Partial Data Stolen (updated)

It’s beginning to sound like another day and another hacker attack on Sony. This time, the attack was against the Sony BMG Greece website. The attack, according to Engadgetdoes not appear to have been particularly sophisticated and was carried out using an automated SQL injection tool that demands more patience than skill.” The hackers were able to obtain usernames, real names, and email addresses of registered SonyMusic.gr customers during the illegal break in. However, there is good news for Sony and their Greece customers as the hack didn’t seem to be entirely successful due to the fact that fields with customer passwords and telephone numbers were either empty or contained fake data.

As much as I would like to hope that this is the end of the attacks on Sony’s websites, the truth is that due to the sheer size of Sony, it’s nearly impossible for them to secure every portable in a short period of time. Even though a company like Apple might be much larger in terms of sales volumes, their online exposure is limited to their Apple.com retail presence, as well as iTunes and MobileMe. Sony on the other hand has many different gaming divisions like PSN, SOE, as well as retail (pro and consumer), music and movie stores to name a few. As Naked Security put it, “it is nearly impossible to run a totally secure web presence, especially when you are the size of Sony.” As they point and something I agree with, Sony may end up being one of the most secure web assets on the net after all of this is put behind them.

Statement from Sony:

 “There was an online tweet that one page of Sony Music Indonesia’s Web site was altered and Sony Music Indonesia shut down the access to such page and started investigation. We are investigating the Sony Music Greece matter.” 

[Via Naked Security]