PSN Accounts Reportedly Hijacked Despite Two-Step Security

PlayStation Network users are reporting unauthorized changes to their accounts, including unknown child profiles appearing in Family Management despite existing sign-in protections.

The complaints have raised concerns about account security, but Sony has not publicly confirmed a new vulnerability or explained how the reported incidents occurred.

In an October 16 Reddit report, one PlayStation user said five unfamiliar child accounts had appeared under their main account without permission.

The user reported receiving account-change notifications and said they could still access their account using a passkey. They subsequently changed security settings and removed stored payment methods.

Other users have described unexpected sign-in ID changes and account takeovers. However, the available reports do not establish whether these incidents share a single cause.

Previous PlayStation account compromises have involved alleged social-engineering attacks against customer support, where attackers impersonated legitimate account owners to obtain access. There is currently insufficient evidence to connect that method directly to the latest Family Management complaints.

The distinction matters because two-step verification protects normal sign-in attempts but cannot necessarily prevent every form of account recovery abuse or unauthorized session access.

Sony's official Family Management documentation confirms that child accounts cannot normally be removed from a family through standard account controls.

Users who discover unfamiliar family members should contact PlayStation Support, review recent account notifications, secure their associated email accounts, and inspect stored payment methods and transactions.

The reports warrant attention, but claims that PlayStation's two-step verification has been universally bypassed, or that attackers have obtained payment card details, remain unverified.