At this point, it looks like whoever was behind the assault did a lot more than steal a few downloadable games as was previously reported. Sony is now reporting that personal data of all types (basically anything that you 'told' the PSN) has been stolen. There's no apparent evidence that credit card info was compromised but as Sony themselves state, "we cannot rule out the possibility".
Bottom line? Be careful:
For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking.The Playstation company is finally taking some steps to keep it's users informed, and that's nice to see, but this should have come right at the beginning of the hack and not over a week after. Calming fears and controlling the level of backlash is one thing, keeping important info from your subscribers is quite another.
Sloppy business Sony.