"If you are responsible for so many payment card details and log-in details, then keeping that personal data secure has to be your priority," the Information Commissioner's Office's deputy commissioner David Smith said. "In this case that just didn't happen, and when the database was targeted  albeit in a determined criminal attack  the security measures in place were simply not good enough."



Today's settlement, which has yet to be approved by the judge, offers plaintiffs benefits such as free PlayStation 3 and PlayStation Portable games, free PS3 themes, free subscriptions to PlayStation Plus, free subscriptions to the Music Unlimited service and free SOE Station cash.



Claims made by those who didn't participate in PlayStation's "Welcome Back" package  a program in which Sony offered PSN members free games as thanks for their loyalty after the security breach  will be honored on a first-come, first-serve basis, subject to an aggregate cap of $6 million. Claimants will be able to choose two separate benefit options or two instances of one PSN benefit option.



Those who did participate in the "Welcome Back" package will be eligible to receive one game benefit, a theme benefit or a PlayStation Plus subscription benefit. Participants will also be honored on a first-come, first-serve basis to an aggregate cap of $4 million.