Sony ISP subsidiary breach exposes 2.5 million customer records
Original title: Sony ISP subsidiary data breach exposes 2.5 million customer records
So-net and plala files include names and birth dates, plus 54,401 email passwords, with no confirmed misuse.
Sony Network Communications said an unauthorized party accessed its So-net member database on October 19 and was detected four days later, after which compromised servers were shut down. Investigators counted 2,585,481 records: 2,141,986 So-net entries and 443,495 plala records tied to NTT Docomo Hikari. No banking or payment-card data was included. Docomo warned of phishing, and Sony reported the incident to Japan’s Personal Information Protection Commission while the cause remains under investigation.
Unconfirmed: Sony has not confirmed how the database was accessed or whether the data has been misused.
- Exposed fields include phone numbers, email addresses, user IDs and connection IDs.
- Another 54,401 email addresses were exposed together with account passwords.
- Docomo says current Hikari clients and cancellations within six months are affected.
- As of October 27, neither company had confirmed misuse of the data.
Impact: Customer personal data and some email passwords exposed
- 1.Change passwords for the exposed email accounts.
- 2.Watch for phishing impersonating d POINT Club or a Universal Studios Japan campaign.
- Products
- So-netplalaDocomo Hikari
- Organizations
- Personal Information Protection Commission
- Countries
- Japan
From the original article
2 min read at bleepingcomputer.com
Sony Network Communications has confirmed a data breach that compromised approximately 2. 5 million records containing current and former customers' personal information. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.