An unauthorized person stole names, addresses and other personal data belonging to about 77 million people who have accounts on Sony Electronics' PlayStation Network, Sony said on Tuesday.
The "illegal and unauthorized person" got access to people's names, addresses, email address, birthdates, usernames, passwords, logins, security questions and more, Sony said on its U.S. PlayStation blog.
Children with accounts established by their parents also may have had their data exposed, Sony said.
Sony, whose PlayStation online service has been down for about a week, said it saw no evidence that credit card numbers were stolen, but warned users that it could not rule out the possibility.
"Out of an abundance of caution, we are advising you that your credit card number (excluding security code) and expiration date may have been obtained," Sony said.
The online marketplace let users buy and play video games on their PlayStation consoles.
The company said the account information for the PlayStation Network and its Qriocity service users was compromised between April 17 and April 19.
The company said its users could place fraud alerts on their credit card accounts through three U.S. credit card bureaus which it recommended in its statement.
Sony, a unit of Sony Corp, said that it could restore some of the network's services within a week.
The online network launched in fall 2006 and offers games, music and movies to people with PlayStation consoles. It had 77 million registered users as of March 20, a Sony spokesman said.
(Reporting by Liana B. Baker. Editing by Robert MacMillan)