Sony said it was working with investigators after hackers stole data from users of its PlayStation Network, and told customers it would restore services only when it was confident it was secure.
The PlayStation Network and Qriocity streaming music service were turned off on April 20 in the wake of an "external intrusion," according to Sony spokesman Patrick Seybold.
"We are currently working with law enforcement on this matter as well as a recognised technology security firm to conduct a complete investigation," Seybold said in a blog posted Thursday on the PlayStation website.
"This malicious attack against our system and against our customers is a criminal act and we are proceeding aggressively to find those responsible."
PlayStation Network launched in November of 2006 and boasts about 77 million registered users worldwide.
It allows PlayStation console users to play games online, challenge others on the Internet, stream movies, or get other services.
The Japanese electronics giant said it was possible hackers had taken users' credit card data.
"While all credit card information stored in our systems is encrypted and there is no evidence at this time that credit card data was taken, we cannot rule out the possibility," Seybold said, warning that "...we are advising you that your credit card number and expiration date may have been obtained."
Sony said it had emailed all 77 million users to warn them that their data may have been stolen.
"Hope these people are caught. I think gamers worldwide would love a new Sony PSN series about bringing them to justice," wrote one gamer using the name BlueFrog007.
Microsoft has warned users of its XBox Live service of possible attempts to steal personal data following the PlayStation Network hack.
"Users may receive potential phishing attempts via title specific messaging while playing Modern Warfare 2," it said on the XBox Live Status website.
"We are aware of the problem and are working to resolve the issue." The problem appeared to be linked to just the one game.
Sony said it was "working day and night to restore operations as quickly as possible" and expected to have some services up and running within a week.
"However, we want to be very clear that we will only restore operations when we are confident that the network is secure," Seybold said.
Sony has not indicated whether it has identified a culprit in the intrusion.
Internet vigilante group Anonymous had vowed retribution against Sony for taking legal action against hackers who cracked PS3 defences to change console operating software.
Anonymous argued that PS3 owners have the right to do what they wish with them, including modifying them.
Seybold said Sony was taking steps to enhance security, including moving its network infrastructure and data centre to "a new, more secure location."
Sony has sold about 48 million PS3 consoles worldwide since they hit the market in November of 2006.