Holy mother of God. This is incompetence on a level of local council budgeting. So basically, Sony have admitted that somebody somewhere has your name, address, date of birth, PSN username and password, and, even thought they're being shy about it, your credit card number, security code, and sort code.

Intel gives the explanation for this bull as Sony sends PSN purchases as smurfing GET requests fully visible in the URL, and then stores all this data in PLAIN TEXT. I facepalmed so hard that I gave myself a brain hemorrhage.