IANAL time, but my understanding is that in the event of identity fraud like this where the purchase was made via a credit card, under the Consumer Credit Act the customer must be paid back and the supplier and the credit card company are jointly liable for the money. Is Sony's attempt to push this liability back onto the purchaser not an illegal attempt to deprive them of their rights under UK law?
Technically under UK law Sony would only be liable for a purchase over £100 and under £30,000, and this purchase was under that amount. However from the article it sounds like this is a blanket policy. (In other words, if the fraudster had stolen £200, Sony would still be trying to illegally push their liability onto the customer.)
Small print in the terms and conditions does not override UK law.