However, the following day Sony reported that they would not be able to bring services back online within the one-week timeframe given on May 1, because "the extent of the attack on Sony Online Entertainment servers" had not been known at the time.
Concerns have been raised over violations of PCI Compliance and the failure to immediately notify users.
Please explain why you do not believe credit card information was obtained and why you cannot determine if the data was in fact taken.
As stated above, Sony Network Entertainment America has not been able to conclude with certainty through the forensic analysis done to date that credit card information was not transferred from the Play Station Network system.
Subsequent to the announcement on both the official blog and by e-mail, users were asked to safeguard credit card transactions by checking bank statements.
This warning came nearly a week after the initial "external intrusion" and while the Network was turned off.