Sony PlayStation Network breach (2011): what happened and what to do
2 min read · Updated November 8, 2026
In April 2011 attackers broke into the PlayStation Network, affecting about 77 million accounts. Names, addresses, email addresses, birth dates and login details were exposed, and the service was offline for around three weeks. If you had a PSN account then, change any reused passwords and check your email.
What happened
Sony shut down the PlayStation Network on 20 April 2011 after discovering unauthorised access, and told users a few days later that personal information had been taken. Service was restored in stages in May 2011.
A separate intrusion into Sony Online Entertainment, announced shortly afterwards, exposed more accounts and added to the damage and to the company’s costs.
What was exposed
- ✓Names, postal addresses, email addresses and birth dates.
- ✓PSN usernames and passwords.
- ✓Possibly purchase history and, for some, card details, which Sony said it could not rule out.
Were you caught up in a major breach?
Old breaches keep circulating for years. Scan your email against known breach records for a one-time $1.99.
Why it still matters
The breach is old, but gaming accounts are often tied to an email address that stays in use for decades. Combined with other leaks, it can help someone build a profile of you.
It also shows why unique passwords matter: a gaming-site leak should never be a path to your email or bank.
What to do
- ✓Check your email address to see whether it appears in known breach records.
- ✓Change any password you used on the affected service, and anywhere you reused it.
- ✓Turn on two-factor authentication, starting with email and financial accounts.
- ✓Be careful with unexpected messages that mention the service.
Frequently asked questions
Is my current PlayStation account affected?+
This was a 2011 incident. If your login is unchanged since then, or reused elsewhere, update it and enable two-step verification.
Were credit cards stolen?+
Sony said card data was encrypted but could not rule out that it had been accessed, and advised users to watch their statements.
How long was the service down?+
About three weeks, before being restored in stages.
Stop guessing. Check your email in seconds.
The Leakill scan looks for your email address in known breach records and delivers a detailed report: the incidents, dates, sources, the kinds of data involved and practical next steps. It is a one-time $1.99 payment, not a subscription.
A breach match is a warning signal, not proof that someone has access to your account today. No public database covers every breach, so a clean result lowers risk without guaranteeing safety.