To day I learned how little people know about internet security and how damage can be done with just your email :-(

I've snipped the explanation of how to do this, but I've also forwarded this on to our security team. Obviously giving people a way to farm the e-mail addresses of PSN accounts is not a good thing.

Meh, a little common sense and due caution goes a long way.

I generally don't volunteer any personal info when registering on forums and such, I rarely use my credit card online (and when I do, it's with sites that I am reasonably confident are as secure as possible), I monitor my credit card balance frequently and regularly, I use PSN Cards for PSN purchases, and I've got multiple "junk" emails, all with different passwords.

To do me any real harm, a person would need much more than just this one email address (even factoring in any other information about me that they could possibly extrapolate from it). I'm not saying it isn't possible but, to target me specifically, a person would have to be pretty determined, and spend quite a bit of time and effort to expand that one email address into something that would actually hurt me.

If they're THAT determined, then they've got a serious vendetta against me for some reason, and will probably find some other, easier, more effective and direct way to hurt me, even if they didn't have my email address.

The only other way this could affect me is if I'm just unfortunate enough to be either randomly selected, or one of many victims in some sort of mass-fraud, and the common sense and due caution that I mentioned above should protect me.

Besides, I could also get hit by a bus on my way to work, that doesn't mean I'll never go outside again.

Face it, stuff happens and, personally, I prefer not to spend my life worrying about every little thing that might possibly happen under just the right set of circumstances. You can't protect yourself from everything.

Obviously I do whatever I reasonably can to protect myself, but I'm not going to lose any sleep because someone might have access to one of my email addresses.

Living in fear is not living.

/rant

lol, you make it sound like they can just type my email address into the magic internet box and the magic computer bots do their computer magic and PRESTO, they have full access to my entire life!

Is it possible that someone could conceivably use information from the internet to steal my identity and/or access my money?

I suppose so, which is why I do take certain reasonable precautions when conducting business online.

On the other hand, It's also possible that I could be randomly shot by a total stranger while walking down the street.

But, is it likely?

Probably not.

When we were made aware, we rewarded the reporter as per our PLEX for Snitches program.

As a part of that, we no longer include the email which it's sent to as a part of the mail. Also, technical changes were made on the backend to prevent abuse of this at a large scale. We're still actively working with them to fix this issue fully, but this is not something that gets done over night.