When Sony Online Entertainment announced last night that it had lost several thousand customers' credit card numbers -- though the theft came weeks earlier, during the main attack affecting Sony's PlayStation Network and Qriocity services -- something didn't add up. Sony Online Entertainment had just one week earlier specifically said that its customers data was safe, because "SOE's systems and databases are separate from PSN's." So, how did SOE customer information leak if the "systems and databases" were different for PSN and SOE?

"While the two systems are distinct and operated separately, given that they are both under the Sony umbrella, there is some degree of architecture that overlaps," an SOE rep told Joystiq this afternoon. Speaking to the method used for breaching the information, the rep told us, "The intrusions were similar in nature," indicating that the same party perpetrated both thefts.

SOE also insisted once more that "This is NOT a second attack," and that yesterday's announcement was a result of "new information" that was discovered on May 1 "as part of our ongoing investigation of the external intrusion in April." It is still unknown when service will return to SOE's games, but the company says "it will be as soon as we are 100% confident that we can resume a safe and secure service."