What's Sony's liability in this sort of a situation? I know that when a vendor had their system hacked, my company offered us Lifelock protection (basically credit monitoring) for free and they've been continuing it since. It should be a law that if you're gonna take credit info from people you're responsible for it!