This is completely Sony's fault. They were asked if they were taking the SoE servers off line, and they replied that they were a different network and not at risk.
What they should have done is taken them down too at that point for a security review.