The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack.
FORBES: Update: Sony Encrypted Playstation Users' Credit Cards, But Researchers Spot Stolen Cards Online