It's hard to believe that anyone running such a substantial service really sees shutting it down for forensic purposes to be a reasonable coarse of action. It i

It's hard to believe that anyone running such a substantial service really sees shutting it down for forensic purposes to be a reasonable coarse of action. It is generally quite unlikely that such investigations will yield arrests if you're playing the averages. I'm familiar with a number of substantial intrusions into services larger or more significant than the PSN that never resulted in any shutdowns. The only example that comes to mind that supports this precedent is the Euro carbon market shutdown, but that occurred because the exchange had clear indications that other customer accounts were compromised and they would have been potentially open to more theft. I wonder if this isn't something more like: hacker discovered --> recovery team switches to hot redundant systems --> everything falls down due to systems/recovery failure or lack of testing.