Sony ISP breach exposes 2.58 million So-net and plala records
October 29: SecurityWeek says about 293,000 records belong to customers who left in March 2026 or later, and the free basic mailbox was not among the stolen passwords.
Sony says an October 19 intrusion exposed 2,585,481 So-net and plala records, including 54,401 email passwords it has reset.
Sony Network Communications said unauthorized access on October 19 to the So-net member database exposed 2,585,481 current and former customer records, disclosed on October 27. The count is 2,141,986 So-net records and 443,495 plala (S Course) records, covering names, phones, emails, user IDs, birth dates, gender and connection IDs. Passwords for 54,401 email accounts on extra mail services were stolen and reset on October 27; membership passwords and payment cards were not included. Sony detected the intrusion on October 23, shut the server down and notified Japan’s Personal Information Protection Commission; the attacker and method remain unknown. BleepingComputer reports no banking data was included, while the other outlets say 16 bank-account records were exposed without bank PINs.
- Split is 2,141,986 So-net records and 443,495 plala (S Course) records.
- 54,401 extra-mailbox passwords were reset; the free basic mailbox was not included.
- Help Net Security counts 1,869,771 current So-net members and 272,215 who left from March 2026.
- Customers who canceled by the end of February 2026 are not affected; NURO showed no leak.
- Sony said on October 27 it had confirmed no secondary harm; Docomo warned of phishing.
Timeline
dated events in the reporting · oldest first- Oct 19, 2026Unauthorized access to the So-net member database · Cyber Security News
- Oct 23, 2026Sony detects the intrusion and stops the server · Help Net Security
- Oct 24, 2026Sony confirms the exposed data categories · Cyber Security News
- Oct 27, 2026Sony discloses the breach and resets email passwords · GBHackers
What each outlet adds
beyond the shared facts- Help Net SecurityBreaks out current versus former So-net and plala members and mailbox groups.
- BleepingComputerReports no banking data and cites Docomo’s six-month cancellation scope.
- SecurityWeekSays the free basic mailbox was excluded and about 293,000 are former customers.
- Cyber Security NewsDates category confirmation to October 24 and notes 16 bank records.
- GBHackersNames the four mail services whose passwords were exposed.
- Countries
- Japan
Coverage
oldest first · one row per article · UTC- · 2d ago
Cyber Security NewsFirst report
Sony confirms So-net and plala breach of 2.58 million records
Contact data, some email passwords and 16 bank-account records were exposed; membership passwords and cards were not.
- · 2d ago
Help Net Security
So-net breach exposes personal data of more than 2.58 million customers
Attackers took membership details plus 54,401 email passwords and 16 bank-account records; membership passwords and card data were not included.
- · 2d ago
GBHackers
Sony So-net breach exposes 2.58 million customer records
Passwords for 54,401 email addresses and 16 bank account records were exposed; membership passwords and cards were not.
- · 2d ago
BleepingComputer
Sony ISP subsidiary breach exposes 2.5 million customer records
So-net and plala files include names and birth dates, plus 54,401 email passwords, with no confirmed misuse.
- · 1d ago
SecurityWeek
Hackers steal 2.6 million records from Sony ISP So-net
Intruders hit the member database on October 19, taking subscriber data plus about 54,000 email passwords and 16 bank records.