Sony admitted that hackers broke into its PlayStation Network and stole loads of gamers' personal information.
Some are calling it the largest heist of private information ever.
The announcement came more than a week after Sony abruptly shut down its PlayStation Network and Qriocity services, telling users it had suffered an "external intrusion."
Sony said the stolen data could have included players' names, home addresses, email addresses, birthdays, network logins and handles -- as well as their purchase history.
The Japanese electronics giant also said it "could not rule out" the possibility that credit card info was stolen.
"We have discovered that between April 17 and April 19, 2011, certain PlayStation Network and Qriocity service user account information was compromised in connection with an illegal and unauthorized intrusion into our network," spokesman Patrick Seybold said in a statement.
"If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained," he said.
The PlayStation Network allows for multiplayer gaming and lets users buy games from an online store, among other features. It connects more than 75 million PlayStation customers over the web.
Qriocity allows subscribers to download movies and music from their PlayStation 3, similar to Apple's iTunes.
Sony said it was keeping both services offline indefinitely while it works to rebuild them, angering loyal gamers.
"I bet if Xbox went down bill gates would (have it) back up in hrs. We all should get a free game for this," one user posted to Twitter.