There is still a significant security vulnerability in Sony’s network that should not be overlooked.

In December, it was widely reported that PlayStation Network accounts could be easily hacked, despite the use of two-factor authentication (2FA) and passwords, because of the way PlayStation customer service verifies account ownership. Hackers only need a transaction number to claim ownership of an account, which effectively bypasses every layer of digital security. Despite this, the security issue has not yet been properly resolved; the user who originally reported the bug had their account hacked again.

OK alors gros rebondissement : c’est vraiment une série Netflix ce hack PlayStation ! 🤣

Il n’y a pas eu de piratage, mais une tentative de piratage. En gros, quelqu’un a voulu pirater mon compte avec mon numéro de facture, mais comme mon compte est protégé depuis la dernière… https://t.co/Iw63vxJWHS

– Nicolas Lellouche (@LelloucheNico) May 13, 2026

Numerama journalist Nicolas Lellouche tweeted to ask if we remember the hacking of his PlayStation Network account, which went viral worldwide. Sony still hasn’t fixed the problem; his account has been hacked again! The only measure reportedly implemented to prevent a recurrence was a “high-risk account” status, which prevents customer service from intervening. However, this protection likely only lasted six months, as the account was hacked again, leaving the user helpless. Lellouche claims that, until the bug is fixed, the same vulnerability can be exploited indefinitely. Consequently, he can no longer enjoy his games without worrying that they could disappear.

Initially, we thought the hacker from the December incident was behind the attack and seeking revenge. However, the current evidence suggests otherwise. The new intruder did not change the account ID and played different games. This undeniably exacerbates the situation, proving that anyone who gains access to a transaction ID can easily claim ownership of an account. According to Lellouche, it’s crazy how easy it is to change the email address, disable the old account completely, and delete the access key. He is driven to despair by the fact that PlayStation acts as if there’s no problem at all.

Sony really needs to update its support protocols!

Source: WCCFTech