The ball has hit the ground, and Sony dropped it. According to the most recent update by the company on the official PlayStation blog, a hacker has broken into the company's secure—or insecure—database, and obtained all user information.
"We believe that an unauthorized person has obtained the following information that you provided: name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID. It is also possible that your online data, including purchase history and billing address (city, state, zip) and your PlayStation Network/Qriocity password security answers mauve have been obtained."
The announcement also states that there is a possibility that credit card data provided through the PlayStation Network or Qriocity was also taken.
Good job, Sony. Your new slogan should be "PlayStation: It only does identity theft."