I know this is an old thread, but after doing a lot of research online etc, I've found that the hacker who hit you, was the same one who has targeted me.
Wanted to see if anyone else has had this occur?
I've had my account since day one and yes, when hacked earlier this year I was one of those who'd failed to set up 2Step Verification. After a lot of back and forths with Sony etc, account was reset, passwords changed, emails changed, 2 step setup. I thought everything was fine. Till i was randomly banned. Called up and got this sorted due to a supposed error on their side, then this morning I woke up to SMS verification codes and when i went to log into my PS4 to check, Invalid Sign in ID.
I called up Sony and spoke to them, they claimed no one had called up pretending to be me, last registered call was the one i had said i'd done. But the email address had been changed. I never recieved an email from Sony advising of this change like you normally would. It was all changed back and i set up a new address and password.
My concerns are, what could they be doing? Note the email address attached to my PSN was completely new and ONLY on the PS4. It is not written down, registered anywhere except on my phone and Sony. The Password is ONLY on the PS4 and written down. It is not stored anywhere electronically and all the email creation etc was done on a network that is highly secured.
I have created a new address and new password again, but anyone have any idea HOW they are doing this? How can they change the email ID and password without supposedly contacting Sony? Granted i question Sonys claims, but they said there was no activity on my account, nothing in their logs about contact except for my last call.