PlayStation Network security vulnerabilities

Security concerns regarding the PlayStation Network (PSN) have intensified following reports of account hijacking. Initially, a prominent community member reported a breach where attackers changed login credentials and associated email addresses, highlighting potential vulnerabilities to social engineering that can bypass two-factor authentication (2FA).

Subsequent reports indicate a broader pattern of account hijacking involving the unauthorized addition of child accounts to existing user profiles. These incidents appear to bypass 2FA processes, with users reporting unauthorized changes to sign-in IDs and email addresses. Because PlayStation’s official documentation prevents users from removing registered family members, affected individuals are being advised to contact support to resolve these compromises.

Sony is currently investigating a security vulnerability affecting PlayStation 5 and PSN users. Reports indicate that unauthorized third parties can link unknown child accounts to existing family management settings, effectively bypassing passwords, passkeys, and two-step verification. Victims have reported finding multiple unauthorized minor accounts attached to their profiles, which may allow attackers to access sensitive personal data, such as full names, and perform unauthorized purchases via linked payment methods. Some users have reported losing total access to their primary profiles. The issue has reportedly been observed since at least early October 2026. Due to current support policies, administrators are often unable to unlink child members directly, as the system may require the profile to reach the registered age of majority before the status can be modified.