Sony confirms So-net and plala breach of 2.58 million records
Original title: Sony Suffers Massive Data Breach- 2.58 Million So-net and Plala Users Data Exposed
Contact data, some email passwords and 16 bank-account records were exposed; membership passwords and cards were not.
Sony Network Communications said unauthorized access on October 19 exposed 2,585,481 So-net and plala (S Course) customer records, disclosed on October 27. The data includes names, phones, emails, user IDs, dates of birth and connection IDs, plus credentials for 54,401 email accounts that Sony reset the same day. Main membership passwords and credit cards were not included. The entry method and attacker remain unknown, and the case is separate from the earlier Sony MOVEit incident.
Unconfirmed: How the attacker entered is undisclosed, and mailbox access or secondary harm is not established.
- The split is 2,141,986 So-net records and 443,495 plala records.
- Sony found the intrusion on October 23 and confirmed categories on October 24.
- Former members who canceled from March 2026 onward are included.
- Sixteen bank-account records were exposed; bank PINs were not stored.
- Sony reported the incident to Japan's Personal Information Protection Commission.
Impact: Customer PII, some email passwords and 16 bank records exposed
- 1.Reset affected email passwords and update saved credentials in email apps.
- 2.Open the official account site directly and avoid unexpected links or attachments.
- Vendors
- Sony Network Communications
- Victims
- Sony Network Communications
- Organizations
- Personal Information Protection Commission
- Countries
- Japan
From the original article
2 min read at cybersecuritynews.com
Sony Network Communications has confirmed a breach exposing 2,585,481 customer records linked to its So-net and plala (S Course) internet services. The company disclosed the incident on October 27, 2026, after finding unauthorized access to its member database. The exposed information includes contact details, account identifiers, and passwords for selected email services.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.