So-net breach exposes personal data of more than 2.58 million customers
Original title: Data breach at Sony-owned internet provider compromises 2.6 million customer records
Attackers took membership details plus 54,401 email passwords and 16 bank-account records; membership passwords and card data were not included.
Sony Network Communications said unauthorized access to the So-net member database on October 19 exposed personal information for more than 2.58 million current and former customers. The company confirmed the intrusion on October 23, stopped the server, and reported it to Japan’s Personal Information Protection Commission. Membership records did not include passwords, but passwords for 54,401 email addresses were stolen and reset on October 27. Sixteen bank-account records were also exposed. Separately, PlayStation Network users reported hijacked accounts, which Sony Interactive Entertainment has not confirmed.
Unconfirmed: Sony says the investigation into the cause is ongoing, no secondary damage is confirmed so far, and it has not confirmed the separate PlayStation Network hijack reports.
- So-net records cover 1,869,771 current members and 272,215 people who left in March 2026 or later.
- Another 443,495 plala (S Course) records were exposed, including 21,130 former members.
- Leaked membership fields include names, phones, emails, user IDs, birth dates, gender, and connection IDs.
- The largest exposed mailbox group is 24,655 free Mail Service (G) addresses.
- Customers who canceled by the end of February 2026 are not affected, and NURO showed no leak.
Impact: Names, contact data, 54,401 email passwords, and 16 bank records exposed
- 1.Set a new password through the So-net My Page portal if an affected mailbox was reset.
- 2.Do not respond to unexpected emails, texts, or calls, or open their links and attachments.
- Products
- So-netPlayStation Network
- Countries
- Japan
From the original article
3 min read at helpnetsecurity.com
Attackers who broke into the So-net member database made off with personal information belonging to more than 2. 58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed. So-net is a Japanese internet service provider run by Sony Network Communications, part of the Sony Group.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.