SIE: PSN flaw allowed unauthorized child accounts and possible name/email access
A PSN flaw let outsiders add child accounts without permission and potentially view names/emails. The flaw was fixed on 8 October; the affected count is under review.
Disclosed
2026-10-26
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Feature flaw and fix
SIE’s response published by 4Gamer in its 5 November 18:00 update confirms a flaw allowing outsiders to add child accounts to a family without permission, irrespective of two-step verification or passkeys. Family managers’ names/emails may have been viewable; affected users and counts remain under review. [1]
SIE detected the issue on 7 October and fixed it on 8 October. It is removing unauthorized accounts and assessing impact. This response does not confirm a card-data leak. [1]
Timeline
- Detected 2026-10-07
- Disclosed 2026-10-26
- 19 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Moderate]Tokyo, MinatoInformation and communications
Sony Interactive Entertainment Inc.
Sources
- [1][News]PlayStationアカウントに無許可で第三者が子供アカウントを作れてしまう問題が発生【更新】4Gamer.net · 2026-11-05 18:00