If they got the database, then they have CC's. It'd be like cracking a online DB, Marketforums for example. You'd get all the users information. Although, considering Sony is a big corporation, I'm sure they have all there DB's separated, with custom encryption, and salts.
But that's just my...