It appears someone used an automated SQL injection tool to find this flaw. It's not something that requires a particularly skillful attacker, but simply the diligence to comb through Sony website after website until a security flaw is found.

While it's cruel to kick someone while they're down, when this is over, Sony may end up being one of the most secure web assets on the net.

Man...no rest for these guys...