I got two of these "Change Your Password" confirmation emails today:

http://i.imgur.com/ph6Vk63.png

Needless to say, I didn't try to change my password today, or indeed years. Is this some shenanigans?

What should I do? I assume if I clicked the link the password change would be complete and might lose my account, so I didn't. Should I change the password in the future? Is this just someone who got people's emails from somewhere and is trying to access their accounts? I don't know if there's something I could've done to prevent them from getting this far.

EDIT: That's 3 emails now.

*Slips out the back door.*

On a more serious note, I hadn't gotten any emails like that from mine. So I don't think it's something that's happening across PSN as a whole.

Welp!
If I were you, I'd change my email and PSN password asap, someone really wants your PSN account, apparently.

You should change your password ASAP. But it has to be good. Post it here so we can check if it's secure enough.

I tried logging into my account on the PC. It accepted the login and password, but it asked me to update my account information, and it said the email with the instructions can take up to 24 hours to receive. It probably won't take that long, but I guess updating information is a good thing to cover my ass here.

That doesn't sound right to me. I'd talk to GOG support or a blue before you do anything with the account.

Gog support for PSN? :p

Hm, I don`t think, that GoG can help with PSN accounts.

As of this moment, GOG and it's affiliates does not have control over PlayStationNetwork. Yet.

Probably your email account was also compromised. I suggest you to change all related passwords, check for malware, force to "forget" all Wi-Fi networks, don't use any password free Wi-Fi networks ever (if any), clean your browsers, make a clean install of proper antivirus/firewall software (if possible) and check your computer, install latest security patches for your current OS (if applicable), change PSN password account twice (if possible + you may also contact PSN tech support for details of recent email confirmations - probably a good thing to do), use only long strong passwords (don't store them in your notepad ever), lastly - BE VIGILANT!

I tried to access it on my PS4, and it asked to update information, but all that amounted to was changing the password. Maybe it really was Sony sending me all those emails for some reason.

Shit, did I faux pas? lol

Those emails you're getting, are they really legit from PSN? I know they look legit (from the pic you attached), but a lot these scammers now have perfected the look of these emails and when you click on them to update your details it redirects the info directly to the scammer.
Some of those Apple ID account emails I get (about 3 a day!), asking me to update my details or change password, look like the real thing to perfection...it's just that I don't have an Apple ID account and never have, and I know they're false. PSN is having a lot of this sort of thing as well now, I believe.

Like people say, you should change your login/password yourself to something very secure and probably also inform PSN about whats happening, as they may want chase down such things, and they should at least be able to work out if your account really is getting accessed or if it's just high quality scam emails.

Though, from people I know that have had problems with PSN (and there are quite a few of them) Sony are not very good with this type of thing and you end up beating your head against a wall. So you REALLY need to head it off before someone hijacks you (which goes without saying), as Sony are terrible at resolving things like this after it happens.

I did get a virus last week, but I've already gone through the clean up process. Full virus scans, malware checks with multiple different tools, even a Windows re-install to make sure. I think the PC is clean now.

I just changed my PSN password for a second time, my GOG, and my email passwords. I don't think anything else was at risk, otherwise I would have gotten notifications and confirmation requests on multiple different emails. In my email's case, the log in IP history doesn't show anything out of the ordinary.

If there was something wrong I think it was just the PSN. I already used numbers, letters, capital letters and symbols on it, but I guess it doesn't hurt to add a couple more symbols to the password.

What about the email as log in? Should I change it too? Any other recommendations from anyone?

EDIT: Forgot PSN had 2-step authentication, just activated it.

A legit password reset notice should say to disregard it if you didn't request it. If a site owner wants you to change your password, you'll either get a prompt when you login, or an e-mail asking you to do it from your account. So it's probably a phishing scam, but you should be OK re the e-mail account.


Doesn't copy-pasting logins circumvent keyloggers?