Sony Exec to Testify About PlayStation Network Hack
Congress has been looking into the theft of millions of credit card numbers from Sony's PlayStation Network, and, until now, Sony has declined to testify about it. — That will change next week. Sony will send Tim Schaff …
Context & Ripple Effects
Sony's reversal ends a two-week standoff with Capitol Hill. After hackers claimed to hold PlayStation users' card data in late April, Sony declined to send a witness when the House held its hearing on May 2, offering instead a written response to the committee on May 4. The appearance of executive Tim Schaff next week converts that paper record into sworn testimony.
The timing compounds the pressure: the same week Sony skipped the hearing, it disclosed another major security breach, so lawmakers probing the theft of millions of credit card numbers from PlayStation Network are now questioning an executive from a company with two breaches to explain rather than one.
First-order effects
- Tim Schaff will answer under oath for the credit card theft and Sony's initial silence, replacing the company's earlier strategy of declining to testify with direct congressional questioning.
- Congress gains what the May 2 hearing lacked — a live witness — shifting the investigation from Sony's written statements to testimony that can be challenged and put on the record.
Second-order effects
- The move raises the bar for other companies holding consumer payment data: Sony's initial refusal became a public relations liability that ended in compelled-style testimony, a path rivals facing their own breaches will want to avoid.
- Payment networks and insurers watching the case get a clearer read on how Washington assigns blame after large card-data thefts, which shapes who bears remediation costs in future incidents.
Third-order effects
- If the pattern holds — high-profile breach, congressional summons, executive testimony — data-breach disclosure moves from a company's own press-release cadence toward a de facto expectation of public accountability before legislators.
- Sustained scrutiny of payment-card theft could push breach-response norms toward standardized notification practices, with companies like Sony structuring security reporting around the assumption that regulators and committees will ask.
The trend: Major consumer-data breaches are migrating from corporate blog posts into congressional hearings, with executive testimony becoming the expected second act after a headline-grabbing hack.