>•By April 25, forensic teams were able to confirm the scope of
>the personal data they believed had been taken, and could not
>rule out whether credit card information had been accessed. On
>April 26, we notified customers of those facts.

this part right here makes it seem like they immediately informed customers of what was going on when in truth they knew of a breach long before. as posted on their own blog they knew of an intrusion on the 19th and, therefore, pulled the plug on the 20th. they did not, however, give any word as to why until the 23rd, but still didn't say anything except that they were working to get it back online. then, 3 days later on the 26th they finally confirmed to customers that their personal information was accessed.

that's a week. a fucking week! their statement above makes it sound like they were on top of it and informed their customers immediately.

sony has always done a hell of a job spinning numbers so again i say FUCK SONY!!