Sony So-net breach exposes 2.58 million customer records
Original title: Sony Data Breach Exposes 2.58 Million Customer Records and 54,401 Email Credentials
Passwords for 54,401 email addresses and 16 bank account records were exposed; membership passwords and cards were not.
Sony Network Communications disclosed that unauthorized access on October 19 exposed 2,585,481 customer records tied to So-net and Plala (S Course) internet services. The database held names, phone numbers, email addresses, user IDs, dates of birth, gender, and connection IDs, plus passwords for 54,401 email addresses. Sony identified the breach on October 23, reset affected email passwords on October 27, and notified Japan’s privacy regulator. It has not named a vulnerability, malware, or attacker.
Unconfirmed: How the passwords were stored, whether mailboxes were opened, and the intrusion cause remain unconfirmed.
- So-net contributed 2,141,986 records and Plala 443,495.
- Email passwords covered Mail Service (G), A-Box, So-net VAIO Mail, and PostPet Mail.
- Sixteen bank account records were exposed; Sony says it does not keep bank PINs.
- Former members who canceled in March 2026 or later are included.
- Sony said on October 27 it had confirmed no secondary harm.
Impact: Personal data, 54,401 email passwords, and 16 bank records exposed
- 1.Reset affected email passwords through So-net’s official My Page portal.
- 2.Do not click links or open attachments in suspicious email, SMS, or calls.
- Vendors
- Sony
- Victims
- Sony Network Communications
- Organizations
- Personal Information Protection Commission
- Countries
- Japan
From the original article
2 min read at gbhackers.com
Sony Network Communications disclosed a data breach that exposed 2,585,481 customer records linked to its So-net and Plala (S Course) internet services. The breach, announced on October 27, 2026, compromised passwords for 54,401 email addresses. However, it did not affect primary membership passwords or credit card information.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.