But you can get the email-address behind the account (displayed right above where you enter the password) and access every game and the list of downloads (store purchases) with is enough info to make Sony's customer service believe they speak to the real owner of that account. "I need to change my payment information and have forgotten my password, also my email-address xxx@yyy.mail is outdated, can you help me please?" works like a charm, especially if you can provide the games you already purchased on that account. People need to setup their security questions and the two step verification. That way customer service is technically bound to NOT "help" the hacker. The expectation to have a customer service fix accounts when the password is "gone" is the worst security weakness in the whole structure, and the more lazy people are with their online IDs (same for mail, facebook, PSN, youtube and whatever other service they are subscribed to, very often even with the same passwords) the easier that weakness gets exploited. (Rumors have it that some of the Korea/China-based 'gold' sellers use the informations people provide to buy their credits/gold/whatever on that websites and see if they can access a fitting PSN or game account - then they empty that account so they get easy access to more 'gold' for sale.)
