The one thing I cannot believe is there managed to lose people passwords, there is no reason what so ever for this, they should have been stored as a one-way hash rather than plain text, this is just sloppy. Ok someone might be able to break the hash but it would take alot of work to break them if they were MD5s. (If Sony had stored them as a hash I am sure they would have said "although peoples passwords were obtained they were "encrypted" .... etc".