Sony investigating reports of unauthorized ‘child’ accounts appearing on PSN profiles

Sony is currently investigating a concerning security issue on the PlayStation Network that involves unauthorized ‘child’ accounts being added to existing user profiles. According to reporting by GamesRadar+, the company confirmed to The Sankei Shimbun that it is looking into claims from players who say these accounts are bypassing standard password protections and two-factor authentication (2FA).

The nature of the exploit

Users affected by this issue report that hackers are successfully adding themselves to victims’ ‘PlayStation Family’ groups as child accounts. This is particularly problematic because of how Sony manages family settings. As noted by GamesRadar+, official PlayStation documentation states that child members cannot be easily removed from a family group by the primary account holder. This restriction makes the exploit difficult for users to resolve on their own, leaving many feeling stuck as unauthorized users gain access to their account details, such as full names and email addresses.

Unauthorized access and financial risks

Beyond the privacy concerns, there is a tangible financial risk involved. Once added as a child family member, these accounts may gain access to the primary user’s payment methods linked to the PlayStation Store. Affected users have taken to social media and forums to express frustration, with some noting that they have discovered unauthorized purchases made on their accounts. While the reports appear to be surfacing heavily among Japanese users, the issue is not geographically exclusive, with players reporting similar experiences globally.

Why it matters

For players, this issue highlights a significant vulnerability in the PlayStation Family management system. If you are a PSN user, you should immediately review your ‘Family Management’ settings to ensure no unrecognized accounts have been attached to your profile. If you find an unknown child account, you should contact PlayStation Support directly, as the standard account dashboard does not currently allow users to remove these entries manually.

While Sony investigates, it is important to stay vigilant. Even if you already have two-factor authentication enabled, these reports suggest the exploit is managing to circumvent that layer of security. Keep a close eye on your transaction history and linked payment cards, and reach out to official support channels if you see any activity or accounts that you do not recognize.