This title strikes me as misleading. It should not come as a surprise that the personal information gathered in the first attack will be used for this purpose. It's just shocking that PSN forgot or misunderstood that they themselves were the first and easiest target.