Strange email from PSN

[Allen]

A while ago I had a PSP, created a PSN network account and used it a bit. Since then, about a year ago, I sold the PSP and haven't logged into the account since. Today, I received this email:

From: "DoNotReply@ac.playstation.net" <DoNotReply@ac.playstation.net>
To: weirdrandomlettersandnumbers@aol.com; allensyahooemail@yahoo.co.uk
Sent: Mon, 9 August, 2010 10:48:21
Subject: PlayStation(R)Network Sign-in ID Change

This email confirms that your PlayStation(R)Network sign-in ID (Email address) has been changed successfully.

If you did not change your sign-in ID...
This email has been sent to you because the sign-in ID (Email address) for the relevant PlayStation(R)Network account has been changed. If you did not change your sign-in ID, please contact Customer Support at the following address:

networksupport@uk.playstation.com

The PlayStation(R)Network Team


--------------------------------------------------------------------------
If you would like to view further information on our terms, policies and frequently asked questions, you can visit the following locations:


PlayStation(R)Network Terms of Service and User Agreement
http://network.eu.playstation.com/tosua/index.html
PlayStation(R)Network Frequently Asked Questions
http://eu.playstation.com/help-support
PlayStation(R)Network Europe Limited Privacy Policy
http://network.eu.playstation.com/privacy/index.html

This email has been delivered from a send-only address. Please do not reply to this message. If you have any queries, please contact Customer Support at the following address:

networksupport@uk.playstation.com

(I have edited the email addresses this was sent to, one is mine the other is some weird AOL email account I've never heard of).

I'm normally pretty good at spotting spam and phishing emails, this email contains only a few links and email address and the actual addresses match the written addresses. Any ideas what this is all about? Is it legit?

I've tried going to the mail PSN website and looking for support, but it's useless. I can't get any contact details for them so am definately not going to email the address above as I don't know it's legit. I also can't log into my account or recover the password as it doesn't recognise my details anymore.

Now I don't care about the account itself, as far as I know I didn't have any points or whatever on it, don't normally play games on consoles (plus my PSP was never online), but I am VERY concerned about a) my personal information on the account, and b) how the HELL could anyone change the email address on my account without emailing me to confirm it before actually changing it and making it impossible for me to recover it?!?!?!

[oolon]

Could we see the full headers for the email are the URLs correct, ie is the text the same as the real locations? Just hover over the links and see if they are right.

[Agent]

Can you log into your account on the official Sony website?

If not, it might have been that your account has been hacked.

[Allen]

Could we see the full headers for the email are the URLs correct, ie is the text the same as the real locations? Just hover over the links and see if they are right.

Full headers:

From DoNotReply@ac.playstation.net Mon Aug 9 09:48:21 2010
X-Apparently-To: allensyahooemail@yahoo.co.uk via 77.238.189.170; Mon, 09 Aug 2010 09:48:25 +0000
Return-Path: <donotreply@ac.playstation.net>
X-YMailISG: biDoyRsWLDuQFsM5DXjG2WXtR2LcClRpWmzxSaFWS7R0srEq
TlRhWV8D.2kV6kibVmqvFetmAxGWKR7XIFfmOSBghcjD01A8Dj99VEPhGaK6
3C5Qr43IkQCYaaZgpamFlHw7Axpo8ImVQXHqkzsV_PMMFEEemxiU1YijrYrl
8e0tSGmO3UvwOuF77L4k9W5o7ktymWE3eFHeowpRlaFUc31UVQxzbsKcbaEM
4H05bi.HEMy9Af_ieYq4OM3dGCz4c3DN9sqW_BA4gybnHr7m7zgQ3oZBUL99
ETMzSzR86PFmzHDDch_mS_WvL2KL8lhy.NlKfjigw_0JoZrn2Uh2PSG9.53B
o0H6gULL0clYuiO.JGoWmbXcS18d6Y3182Z3smYYJ2INg2DJFY9JEzoVU.26
uRg8zuEUWDumoKS1OlTBBq1GgnE.Lf5hAaf5KTLSIEy05j8d5rwuS0eAWvRo
QcbG1NQ4T.S6DfCZhzr.NmKZc1tqpqB70uyZClNbVTbV5cH1I5VPldrUbAW7
RLnbsHfkRFQIg3RGwKTrHKFNE70BTtMfseZq7OBg5za485stPVOi8PugmcVK
NgjYUMcEaZZeIw6EdUl3Xi49I0G9vCDRaOoqn3pVmQSW8YWk_jDRAit8_uJ2
rY1EIDhiH8nXcsE79iswymZlGXj6DecyqMIVT5J1oVU6hucPzyw5xVg8Y7ZU
49de2YFxdCZr_ZtoPxKnnqCwc9T8PzwupMqs3AAUUjrQLN_BS35UzIylgTRz
saPXs3ZjP8AkhUWGX7bDEsrZqg2nAha1bb0R9VXyjEoqW9PRHabiMUYm5sqe
vHgYckaiT4FTSt9JqdtpUdPLzsJ3bEQ6SPVXazAQI6ajA85rfBIikv57Fpwe
s7_C6VoVY85bzxrz2QVOucZ1W0VjSjarHZN.E2qBCqJVHDmsJJyqzBRfbn6E
5DZiURCVhmFNwRbqaJgB7v.5Y2B5pegysFLwLtXEpZqjqOGj1TaocujrKXLV
fQAP2OhNOLQEw66QU72euEkXZa544b1HTX4cEvdx7Xi.z5OLEVxzD4GI_ry5
wHuNYqNZghMS6TeCuwegqbmHSnIXmmFdyg1VACSUpKW5MSSq
X-Originating-IP: [199.108.4.53]
Authentication-Results: mta1018.mail.ird.yahoo.com from=ac.playstation.net; domainkeys=neutral (no sig); from=ac.playstation.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sdknav-mx2.ac.playstation.net) (199.108.4.53)
by mta1018.mail.ird.yahoo.com with SMTP; Mon, 09 Aug 2010 09:48:25 +0000
Received: from sdknav-t02.station.sony.com (sdknav-t02.station.sony.com [10.132.15.81])
by sdknav-mx2.ac.playstation.net (8.13.8/8.13.8) with ESMTP id o799mL9B012367;
Mon, 9 Aug 2010 02:48:21 -0700
Received: from sdknav-t02.station.sony.com (localhost.localdomain [127.0.0.1])
by sdknav-t02.station.sony.com (8.13.1/8.13.1) with ESMTP id o799mLVN007841;
Mon, 9 Aug 2010 02:48:21 -0700
Date: Mon, 9 Aug 2010 02:48:21 -0700 (PDT)
From: DoNotReply@ac.playstation.net
To: random@aol.com, allensyahooemail@yahoo.co.uk
Message-ID: <32687913.3732514.1281347301905.JavaMail.tomcat@sdknav-t02.station.sony.com>
Subject: PlayStation(R)Network Sign-in ID Change
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Content-Length: 1235

Yes, the URL's are correct, I did try to say that but obviously didn't word it well enough.

[Allen]

Can you log into your account on the official Sony website?

No, I used the forgot password link on the official page and it said my email address didn't exist.

If not, it might have been that your account has been hacked.

I'm guessing that did happen, but really don't know how. I don't use it, and haven't logged into it from a computer for about a year, so it's not like it's been keylogged. The password was also not a word or linked with me at all, so couldn't have been guessed.

[Allen]

What is a major concern is how on earth someone changed the email on my account without being verified by the current email address on the account. When I changed the email address on my battle.net account, I did it through the account management, it sent an email to my existing email address, then I clicked a link in that email and it changed it.

It's a bit worrying that it can be changed so easily, and I would've though Sony were more secure than that!

[Allen]

Found an email address on the Playstation site, help@uk.playstation.com, have fired off an email asking for an explanation.

[Rob_B]

You can't login as your email doesn't exist cos it was just changed
That said I have no idea other than what you've just done by emailing them.