A new exploit may have allowed hackers to change account passwords on Sony’s recently restored PlayStation Network, according to a report published Tuesday night.

The gaming website Nyleveia.com first discovered that hackers could change any account’s password on PlayStation.com by entering a user’s e-mail address and birth date.

“Despite the methods currently employed to force a password change when you first reconnect to the PlayStation network, your accounts still remain unsafe,” Nyleveia.com wrote. “A new hack is currently doing the rounds in dark corners of the internet that allows the attacker the ability to change your password using only your account’s e-mail and date of birth. It has been proven to me through direct demonstration on a test account, so I am without any shadow of a doubt that this is real.”

Since user e-mail addresses and birth dates were among the data compromised during the initial attack on Sony’s servers in April, this would put the majority of the 70 million or so PlayStation Network accounts at risk.

Any PlayStation Network user affected by this exploit would most likely receive an e-mail indicating that their password has been changed.

A moderator on Sony Europe’s message board said Wednesday that logins would be disabled for PlayStation.com, the PlayStation forums and all of the company’s individual game websites. Though players can still log in to the PlayStation Network, they cannot change their passwords on any of Sony’s websites.

Sony Europe said that the downtime is due to “essential maintenance” and that it is unclear how long it will take before its websites are restored. A maintenance notice on the PlayStation blog Wednesday said: “We’re making a few quick changes and the site will be back online in just a few moments.”

Sony did not immediately respond to Wired.com’s request for information on the situation.

Last Saturday, Sony began restoring its PlayStation Network services, which had been down for more than three weeks following a major security breach that potentially compromised millions of customers’ personal data.