Recent incidents highlight significant vulnerabilities within the PlayStation Network (PSN), allowing hackers to compromise accounts despite two-factor authentication (2FA) and passkeys being in place. A French tech journalist, Nicolas Lellouche, reported that his PSN account was accessed by a hacker who manipulated Sony support protocols to gain control.
The hacker managed to change the account's email and password, as well as make unauthorized purchases. Lellouche noted that the hacker only needed a transaction number and the account's username to facilitate the takeover, raising concerns about Sony's verification processes. Furthermore, Sony agents reportedly do not ask for critical information such as the owner's name or date of birth.
This alarming trend is not isolated, as other users have shared similar experiences following Lellouche's disclosure. In one notable case from last year, a prominent trophy hunter known as Hakoom faced account theft, while another top player, dav1d_123, had his information compromised and the account listed for sale. As of now, Sony has not addressed these security issues or taken corrective measures.