Do you really think every time Sony is penetrated, it's announced and everything is dumped like Lulzsec and other loud mouths do? The much more likely thing is that these vulnerabilities were known for quite awhile before.