Sony just cannot catch a break, they finally get the PSN up and running after nearly a month of downtime only to have the website version of the PSN password reset be exploited.
Late last night Nyleveia discovered--Eurogamer and NeoGaf have confirmed--that Sony's password reset system can be used by any would-be hacker to reset your password using only your PSN account email and birth date. And as easily as that someone can exploit your password and gain access to your account. Both of those pieces of information were of course up for grabs during the recen PSN hack, thankfully if your password was changed you would have at least recieved an email notifying you.
Sony has since pulled down all of their web-based login systems, with no word currently on when they'll be up again. The official twitter account of the SCEE stated this morning "this maintenance doesn't affect PSN on consoles, only the website you click through to from the password change email." Which (to clarify) means you can still log into and play games via PSN, you just can't use any website logins until this is fixed.
We've contacted Sony for a statement.