[Oni]

Your password could've been acquired from another forum/site that was compromised, and then used to get into your Sony account. It happens quite often; it was how this site was pwned after all.

It's true. In my case, they did recoveries on a couple of accounts. Even if you didn't use the same password on your Sony account, you may have used the same one on the email associated with your Sony account.