In this day and age, for an electronics company with the cultivated reputation for producing highly technical and sophisticated electronics and software products, and a company with a history of embedding files into clients computers for tracking and other purposes, it could be safely assumed by customers that SOny would have state of the art hardware and software solutions for protecting client data. If it is found that they promoted online sales of any kind without such protections, they will get spanked, and not just a little. This could run into the billions of dollars, and potentially destroy the companys' reputation.
I just checked Sony's Canadian website. I just heard about this today after checking in here. Sony appears to be taking action to mitigate potential damage for their US customers, but I see nothing for us Canadians.
I think I funded my son's Sony account with $30 about four years ago. Am I at risk? I have no idea what password I used or anything. One time and I incorrectly assumed it would be wiped after the fact.
This is not incompetence. It will be viewed by the courts as criminal negligence.
Disclaimer: I am not a lawyer, nor did I stay at a Holiday Inn Express last night>
Oh, edit to add: You KNOW the credit card companies are gonna be all over this as well.