Reports Say PSN Account Takeovers Exploit Support Procedures

A significant security vulnerability within the PlayStation Network is enabling hackers to seize user accounts by exploiting customer support channels, according to numerous reports from affected users. The method, which reportedly bypasses standard security measures like two-factor authentication, has impacted both prominent figures and regular players.

The issue centers on a process where individuals contacting PlayStation support need only provide a user’s public PSN ID and details from a past transaction, such as a transaction ID, to be recognized as the account owner. Support agents or systems then allegedly allow these individuals to change the account’s associated email address and disable two-factor authentication, effectively locking out the legitimate user. Affected individuals state they received no prior warning beyond a text notification that their account email and 2FA had been altered.

Podcaster and journalist Colin Moriarty publicly detailed his account compromise, stating he was specifically warned he was being targeted. Despite having two-factor authentication enabled and changing his password, he lost access to his account. Moriarty emphasized he was not...