Converts

# FORMAL DEMAND FOR AN IMMEDIATE INTERNAL INVESTIGATION INTO SUSPECTED PLAYSTATION INTERNAL CORRUPTION, ACCOUNT THEFT, AND UNAUTHORIZED DISCLOSURE OF CONFIDENTIAL CUSTOMER DATA **[VERY URGENT – STRICTLY CONFIDENTIAL – EXECUTIVE ESCALATION REQUIRED]** **To:** PlayStation Executive Management, Corporate Security, Internal Audit, Compliance, Legal Affairs, Data Protection, and Customer Support Supervision. **Subject:** Immediate Investigation into Suspected Employee Misconduct, Unauthorized Access to Customer Records, Confidential Information Leaks, and the Theft and Black-Market Sale of PlayStation Accounts. --- ## 1. FORMAL INVESTIGATION REQUEST I formally demand an immediate, comprehensive internal investigation into serious suspected security breaches, employee misconduct, corruption, unauthorized access to customer records, and the theft and illegal resale of PlayStation accounts involving individuals allegedly abusing privileged access to PlayStation Customer Support systems. **This matter requires immediate executive escalation and must not be treated as an ordinary customer-support complaint.** If the recipient lacks investigative authority, this report must be forwarded in full to the appropriate senior management, Corporate Security, Compliance, Legal Affairs, or internal investigation department. The investigation must identify and stop unauthorized customer-data access, information disclosure, account theft, and black-market trading, while holding all individuals involved accountable. ## 2. SUSPECTED INTERNAL CORRUPTION, CUSTOMER-DATA LEAKS, AND ACCOUNT THEFT Evidence submitted with this report documents thousands of PlayStation Network accounts and PSN IDs, including rare three- and four-character IDs, being advertised, traded, and sold through Telegram, Instagram, and other marketplaces. Some sellers allegedly claim access to, or cooperation with, individuals inside PlayStation Customer Support. The reported operation involves obtaining confidential customer information, facilitating account takeovers, and selling stolen accounts. The suspected activities include: - Unauthorized access to internal PlayStation support systems, PACMAN, and customer-management interfaces. - Searching for and retrieving confidential customer records without legitimate authorization. - Extracting, copying, selling, or disclosing customer information to unauthorized third parties. - Supplying account and identity-verification information to account thieves. - Manipulating account-recovery procedures to take control of legitimate accounts. - Selling stolen accounts and valuable PSN IDs through Telegram, Instagram, and other marketplaces. - Receiving or arranging payments, including cryptocurrency such as Bitcoin. - Repeatedly targeting customers through coordinated theft and resale operations. The potentially exposed information includes: - Full legal names, home addresses, and contact details. - Payment-card and financial information accessible through support systems. - Purchase histories, invoices, and transaction information. - PSN IDs, account identifiers, and registered email addresses. - Console information and serial numbers. - Account-recovery and identity-verification information. - Other confidential customer records. These incidents must be investigated as potential internal security and data-protection breaches, not merely violations of account-trading policies. ## 3. ACCOUNT-RECOVERY MANIPULATION AND CONCEALMENT OF INTERNAL LEAKS A particularly concerning reported method involves separating the employee who initially exposes customer information from the support agent who eventually processes the account recovery. The operation reportedly follows this sequence: 1. **Internal extraction:** An employee with privileged support access retrieves confidential information belonging to a targeted customer. 2. **Unauthorized disclosure:** The information is provided or sold to an external buyer or account thief. 3. **Impersonation:** The buyer contacts PlayStation Support and impersonates the legitimate account owner using the previously obtained information. 4. **Account takeover:** Another support agent processes the recovery request and changes account details or transfers control, potentially without knowing that the verification information was unlawfully obtained. 5. **Concealment:** The final transaction appears to be an ordinary support interaction, potentially hiding the original employee responsible for the leak. **Investigating only the support agent who completed the recovery is insufficient.** PlayStation must independently trace the original information disclosure and the subsequent recovery operation, then correlate both investigations. For every affected account, investigators must establish: - The employee who first accessed the customer record, their internal ID, permissions, and exact access date and time. - Which information was viewed, searched, copied, exported, disclosed, or modified. - Whether the employee accessed multiple targeted accounts. - Whether access occurred shortly before suspicious recovery attempts. - Which agent processed the subsequent recovery and whether they unknowingly relied on leaked information. - Whether supervisors approved, reviewed, or participated in the activity. - Whether common employees, accounts, devices, or access patterns connect multiple incidents. ## 4. PACMAN SYSTEM, VERIFICATION WEAKNESSES, AND FRAUDULENT SUPPORT IMPERSONATION The submitted technical materials describe weaknesses in online and telephone-based account verification and the reported use of an internal support system identified as **PACMAN**. After passing support verification, an agent may use PACMAN to retrieve or manage account information, including: - Customer name. - PSN ID / online ID. - Registered email address. - Console serial number. - Other account information available through the support workflow. The evidence package includes a recreated reference image illustrating the reported internal tool and interface. **This image is a reference reconstruction, not necessarily an original production-system screenshot, and must be independently verified.** A further impersonation method reportedly involves attackers contacting victims while pretending to represent the **Teleperformance support team** or claiming to be a **Senior Sony Security Engineer**. They request additional verification information, including console serial numbers and other account-security details. Attackers exploit the familiarity of legitimate support callbacks to make fraudulent communications appear authentic, potentially persuading victims to disclose further sensitive information. PlayStation must: - Audit PACMAN and all internal systems used to search, retrieve, display, or modify customer records. - Review privileged employee permissions and enforce minimum-necessary access. - Audit sensitive-record access and account modifications. - Strengthen verification against information obtainable through internal support systems. - Review callback procedures and provide reliable customer-authentication methods. - Investigate whether leaked information was used to defeat verification. - Preserve access logs, case records, recordings, and related system events. ## 5. MALICIOUS CONTENT PLANTING AND UNJUSTIFIED ACCOUNT SUSPENSIONS Another reported account-abuse method involves attackers sending policy-violating content after compromising a victim's account. This includes abusive or offensive messages, obscene text, inappropriate images, videos, and other prohibited material. The apparent purpose is to generate reports and trigger moderation action against the legitimate account owner. Consequently, even after recovering the account, the victim may face restrictions or suspension for content created by the attacker. PlayStation must: - Identify the dates and times of relevant messages, images, videos, and other content. - Correlate this activity with login sessions, devices, and unauthorized account access. - Determine whether the material was created during the compromise period. - Review related moderation reports and enforcement decisions. - Prevent attacker-generated content from being automatically attributed to the legitimate owner without investigation. - Reassess suspensions resulting from maliciously planted content. - Restore the legitimate account's standing when unauthorized activity is established. **Legitimate account owners must not be punished for content demonstrably created by attackers during unauthorized access.** ## 6. INTERNATIONAL SCOPE AND IDENTIFIED VICTIM CASES The reported activity involves marketplaces, individuals, and suspected support-related activity across: **Japan, the United States, Canada, Germany, France, and other countries and regions.** A coordinated investigation across relevant regional PlayStation entities and support operations is therefore required. ### Case 1 – Matrixlord (@Matrixlord) X: nitter.cf/Matrixlord YouTube: youtube.com/watch?v=RcYsY7iX… Matrixlord is a well-known PlayStation trophy hunter. The submitted materials describe the alleged disclosure and distribution of his account information through a corrupt support-related source, followed by its sale and account takeover. ### Case 2 – Hakoom (@Hak00m_) X: nitter.cf/Hak00m_ YouTube: youtube.com/watch?v=clTGxBWj… Public X post: nitter.cf/Hak00m_/status/1856790… Hakoom is a recognized gaming professional, prominent content creator, and holder of five Guinness World Records. The submitted materials describe the alleged disclosure and sale of his account information through a corrupt support-related source, followed by an account takeover. ### Required investigation Both cases and other identified victims must be examined to establish: - The original source of the exposed account information. - Whether internal support systems were accessed without authorization. - Which employee accounts accessed the affected records. - Whether information was disclosed or sold before the takeovers. - Which support interactions resulted in account changes. - Whether PACMAN or other internal tools were involved. - Whether the same employees, access patterns, or recovery methods appear in other cases. Restoring an account alone is insufficient; the original source of the disclosure and every participant must be identified. ## 7. EVIDENCE SUBMITTED AND REFERENCE LINKS I possess substantial supporting evidence in PDF format, including screenshots, photographs, conversations, videos, links, and other records. The evidence is continuously updated to include newly identified account theft, information leaks, marketplace activity, and related incidents. The evidence includes: 1. Internal PlayStation Customer Support interfaces and control-panel screenshots. 2. Customer-search and account-management tools. 3. Records relating to unauthorized customer-information disclosure. 4. Telegram marketplace conversations and black-market communications. 5. Advertisements and sales of PlayStation accounts and PSN IDs. 6. Communications involving individuals offering or selling customer information. 7. Discussions concerning suspected corrupt support personnel and compromised accounts. 8. Instagram profiles, Telegram users, and marketplace channels. 9. Images, videos, and supporting incident records. 10. Public statements and reports from affected customers. All materials must be securely preserved and accessible only to authorized investigators. Link to the full report : nitter.cf/PSNINSIDE/status/21185… These links are investigative leads for examining account sales, rare PSN ID trading, information disclosures, buyer–seller communications, and potential connections to individuals with internal support access. Their inclusion does not by itself establish wrongdoing; their actual content and associated evidence must be verified. ## 8. MANDATORY FORENSIC INVESTIGATION AND EVIDENCE PRESERVATION PlayStation must immediately preserve and forensically examine: - Customer-support and PACMAN access logs. - Internal customer-search histories. - Customer-record viewing, copying, export, download, and modification logs. - Employee IDs, roles, permissions, and access histories. - Support case histories and internal notes. - Account-recovery and identity-verification records. - Account email, name, PSN ID, and other modification histories. - Support call recordings and callback records. - Communications between support employees and supervisors. - Internal approvals and escalation records. - Login, authentication, device, and session records. - Access records involving customers' payment, purchase, and personal information. **Particular attention must be given to the period immediately preceding each reported account takeover.** Investigators must correlate employee access with external marketplace advertisements, suspicious communications, account sales, and subsequent account modifications to identify the original source of each leak, the recipients of the information, and everyone who participated in or enabled the operation. All relevant records must be preserved before routine retention, deletion, or system changes make them unavailable. ## 9. FORMAL DEMANDS AND IMMEDIATE CORRECTIVE ACTIONS I formally request the following: 1. **Executive-level investigation:** Open an independent, comprehensive investigation covering all relevant regions and departments. 2. **Immediate action against internal corruption:** Identify and stop unauthorized customer-record access, information disclosure, and employee cooperation with account thieves. 3. **Restrict suspected personnel:** Temporarily restrict privileged access and apply appropriate administrative measures where supported by evidence and applicable procedures. 4. **Accountability:** Identify employees, supervisors, intermediaries, and external individuals involved, and initiate appropriate disciplinary, civil, or criminal referrals. 5. **Stop stolen-account trading:** Take effective action against networks and channels involved in selling stolen accounts and confidential customer information. 6. **Audit internal systems:** Conduct a comprehensive review of PACMAN and all tools used for customer searches, information access, recovery, and account modification. 7. **Audit affected accounts:** Trace both the employee who initially exposed information and the support agent who processed the subsequent recovery. 8. **Strengthen verification:** Prevent information obtainable through support tools from being used to impersonate customers or bypass account-security procedures. 9. **Protect victims:** Restore legitimate account ownership, secure compromised credentials, and investigate unauthorized changes and transactions. 10. **Prevent moderation abuse:** Review attacker-generated content and reverse unjustified restrictions or suspensions. 11. **Strengthen privileged access:** Implement strict role-based permissions, monitoring, anomaly detection, access restrictions, and employee accountability. 12. **Cross-regional investigation:** Examine incidents involving Japan, the United States, Canada, Germany, France, and all other affected regions. 13. **Preserve evidence:** Secure all relevant logs, records, communications, recordings, and account histories. 14. **Formal acknowledgment:** Confirm receipt, registration, escalation, and assignment to the appropriate investigative authority. 15. **Written action plan:** Provide a substantive response outlining the investigation, protective measures, and corrective actions. ## 10. EXTERNAL REGULATORY AND LAW-ENFORCEMENT ESCALATION Given the reported scale and international nature of these incidents, this report and its supporting evidence may also be submitted to relevant external authorities, including: - Consumer protection authorities. - Data protection authorities. - Cybersecurity regulators and oversight organizations. - Relevant national law-enforcement agencies. - The Federal Bureau of Investigation (FBI). - The FBI Internet Crime Complaint Center (IC3). - Other appropriate national and international regulatory bodies. Any criminal conduct established through investigation should be referred to the appropriate authorities. ## 11. FINAL NOTICE AND REQUEST FOR EXECUTIVE ACTION This matter must not be ignored, minimized, or dismissed as a routine account-security complaint. PlayStation customers entrust Sony and PlayStation with their accounts, personal information, payment-related details, purchase histories, and confidential data. Such information must never be exploited, disclosed, or sold by individuals entrusted with protecting it. I possess extensive supporting materials, including screenshots, photographs, videos, links, black-market conversations, and records relating to the reported disclosure and sale of customer information and accounts. The evidence continues to be updated. If meaningful action is not taken, I reserve the right to escalate this matter publicly and provide an appropriately prepared version of the evidence to relevant external authorities and the wider community, while protecting confidential customer information and victims' personal data. I formally request: - Written confirmation of receipt and registration. - Confirmation of escalation to senior management and the appropriate investigation teams. - Confirmation that relevant internal records and evidence have been preserved. - A substantive written response outlining the actions being taken. - A clear commitment to investigating and addressing all reported misconduct. **Every person involved must be identified. Every suspected breach must be investigated. Every affected account must be addressed. Every employee found responsible must be held accountable through the appropriate procedures.** The protection of PlayStation users and their personal information must take priority over the reputation or position of any employee, supervisor, or internal department. Sincerely, **[Your Full Name]** **[PSN ID / Contact Information, if appropriate]** **[Date of Submission]** --- # ATTACHMENTS AND SUPPORTING EVIDENCE **Attachment 1 – PDF Evidence Package** Compiled screenshots, photographs, internal-interface references, conversations, and supporting records. **Attachment 2 – Instagram References** All profiles listed in Section 7.A. **Attachment 3 – Telegram User References** All accounts listed in Section 7.B. **Attachment 4 – Telegram Channels and Marketplaces** All channels listed in Section 7.C. **Attachment 5 – Public Victim Reports** - Matrixlord: nitter.cf/Matrixlord - Matrixlord's YouTube report: youtube.com/watch?v=RcYsY7iX… - Hakoom: nitter.cf/Hak00m_ - Hakoom's YouTube report: youtube.com/watch?v=clTGxBWj… - Hakoom's public X post: nitter.cf/Hak00m_/status/1856790… **Attachment 6 – PACMAN and Support-Verification Reference** Reference reconstruction and associated materials describing the reported PACMAN support tool, accessible account information, and account-recovery manipulation process. ### COMPLETE EVIDENCE REPOSITORIES Google Drive: drive.google.com/drive/folde… MEGA: mega.nz/folder/HlQykYaB#1rWo… @PlayStation @AskPlayStation @Sony #PlayStation #PSN #CyberSecurity #AccountSecurity @PlayStation @PS_Support_US @PS_Support_JP @PlayStation_jp @Sony @SonyGroup_JP @SonyGroupGlobal #PlayStation #PS_Support_US #PS_Support_JP #PlayStation_jp #Sony #SonyGroup_JP #SonyGroupGlobal @denfaminicogame #denfaminicogame @game_watch #game_watch @4GamerNews #4GamerNews @Dexerto #Dexerto @IGN #IGN