Another High-Profile PlayStation Account Is Hijacked, Reviving Fears About Sony Support
The takeover method reported in May appears to still work, letting attackers change an account's email even when two-factor authentication is on. Sony has not made a public statement.
A well-known PlayStation community figure says his PlayStation Network account was taken over on October 3, even though two-factor authentication was switched on. The incident, reported by Push Square, revives concerns about a takeover method that surfaced in May and that Sony has not publicly addressed (Push Square).
<blockquote><strong>Update, October 25:</strong> RealRadec regained access to his account within days and said it would be "foolish" not to acknowledge that it was dealt with quickly because of the position he is in, adding that not many victims have his reach (<a href="https://www.pushsquare.com/news/2026/10/this-needs-to-change-ps5-influencer-regains-access-to-account-but-admits-not-many-have-my-reach">Push Square</a>). Sony has still not said what it will change.</blockquote>
What happened
RealRadec, who has more than 30,000 followers on X, posted that he tried to log in, change his password, sign out of all devices and turn two-factor authentication back on, and that none of it worked. In his words, the attackers "still managed to change my proper email address." He said he had not been phished or clicked any suspicious links, and reports say PlayStation's support phone line was unavailable when he tried to call (CheatCC).
The incident matters because the usual defences did not stop it. Two-factor authentication protects the login; it does not help if the attacker can persuade the company itself to change the contact details tied to the account.
How the takeover reportedly works
| What attackers reportedly need | Where it can come from |
|---|---|
| PSN username | Often public |
| Email address linked to the account | Data leaks, guesswork, public posts |
| A transaction ID or purchase date | Receipts, screenshots, or trophies that show a launch-day purchase |
According to Push Square, attackers then use social engineering with Sony's customer support, posing as owners who have lost access and asking for the email to be reset and two-factor authentication disabled. TweakTown, in a report dated May 21, 2026, described the same weakness: a single transaction ID submitted as proof of ownership. Content creators who share a lot online may expose these details in screenshots or videos without realising.
None of this is based on a statement from Sony, and the method is described as reported, not confirmed.
The earlier case
Podcaster Colin Moriarty was targeted in May 2026, an incident that drew attention to the problem. TweakTown says victims reported losing entire digital game libraries and having funds stolen, and other reports say many ordinary users never get a stolen account back (iXBT Games).
Sony's response
TweakTown reported in May that Sony had issued no official statement or fix, and there is still no public Sony comment on the October 3 incident or on whether support has changed how it verifies ownership.
Why digital libraries raise the stakes
Push Square ties the concern to PlayStation's push toward an all-digital future. A disc owner who loses an account still has the disc; a player whose library is entirely digital can lose thousands of dollars of purchases. That makes the account itself the most valuable thing many PlayStation owners have.
What players can do
None of these is a guarantee. TweakTown advises monitoring transaction history and turning off guest purchases. Players can avoid posting receipts or order numbers publicly, keep the account email private, and be aware that trophy timestamps can reveal purchase dates. If an account is taken, contact Sony support quickly through official channels, though recovery can be slow for players without a large following.
What to watch next
Watch for a Sony statement on account recovery rules and any change to what support accepts as proof of ownership.