No one was saying that this was done by script kiddies, but IIRC there were monitors on Sony's network for suspicious activity, and they did flag some of the activity, but the relevant people were told to ignore it by Sony's 'security' team. (I imagine this means that they get lots of false-positives and were just too used to ignore the alerts?)