Wow. I don't think Sony could be handling it any better than that. Bravo.
(Yes, they were incompetent for letting this attack take place. I am merely saying, in the wake of the disaster, there is no better way to handle it than the above.)
But clearly this isn't important enough for the CEO to get involved with.
The CEO of which region of Sony? I don't expect an apology is coming from the American or European regions anytime soon. At least the Japanese region's reaction jibes with the Japanese way of doing business.
Im not sure how you would prove this, but if it could be proven, could Sony be held liable for identity theft damages that resulted from this data?