Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information that you provided: name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID. It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have been obtained. If you have authorized a sub-account for your dependent, the same data with respect to your dependent may have been obtained. While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained.

How have Sony allowed this to happen?

They probably employed security experts. We all know how expertly secure they can be...

PSN failure update

"Please note that we are as upset as you are regarding this attack and are going to proceed aggressively to track down those that are responsible."

"Please note that we are as upset as you are regarding this attack

I think you're all fixating on credit cards far too much. The fact is, the information they say may have leaked, completely aside from CC details, is enough for someone to fraudulently take out new credit agreements in your name. So you could end up financially screwed even if they don't have you current credit card details. If you haven't been using them already, I'd seriously consider going to creditexpert or experian and taking out their services - they can watch for someone trying to use your details to get credit and inform you if it happens.

Otherwise, you could have a really nasty surprise turning up at your door some time.

Jon

[Obvious trolling] glad I have an xbox

Well in this case, yes, fair enough. But there's no specific reason to assume XBL is actually immune to something like this happening to it. Do you have a credit card tied to your XBL account, or do you just use the pre-paid points cards? Now we've had a very public demonstration about just how much personal info is stored in 'games console accounts', it would be prudent to assume the XBL is very much on the target list for the black hat community.

Jon