Sony indicated it's working with the U.S. Federal Bureau of Investigation and is still investigating the scope of the attack, which involved stealing customer account information involving names, passwords, birthdates, email addresses and other personal information.

The commencement of the attack may have come somehow disguised as a purchase. While 10 million accounts have credit-card numbers associated with them, which Sony says were stored in an encrypted database, it by the attacker or not.

Sony's CIO Shinji Hasejima last weekend called the cyber-assault on PlayStation Network a "sophisticated" one. Sony has so far described the attack as exploiting a known vulnerability in an application to plant software used to access a database server that sat behind a firewall.

The company, which claims it has "implemented a variety of new security measures to provide greater protection of personal information," says both divisions, Sony Computer Entertainment (SCE) and SNEI, will work together to soon restore online game services.

While Sony did not provide much detail on its new security measures, they are said to include "automated software monitoring and configuration management to help defend against new attacks" and "enhanced levels of data protection and encryption," as well as "enhanced ability to detect software intrusions within the network, unauthorized access and unusual activity patterns," plus more firewalls.