Sony Network Communications reports data breach affecting 2.58M customers

Summary

Sony Network Communications has reported a significant data breach affecting 2.58 million customers of its So-net and plala internet services in Japan. Hackers accessed the member database on October 19, 2026, with the breach being discovered on October 23. The leaked information includes names, email addresses, and user IDs, impacting 2.14 million So-net members and 443,000 plala customers, with 54,401 email passwords also compromised. However, no credit card information or bank PINs were involved in the breach. The company immediately shut down the compromised servers and reset affected email passwords on October 27, and it has notified Japan's Personal Information Protection Commission to investigate the incident further.

Tokens

$SONY

Analysis

Sony: Sony Corporation is a Japanese multinational conglomerate with operations in electronics, entertainment, and technology services. It is the parent company of Sony Network Communications, the entity directly handling the affected internet services. The parent company context underscores the scale of the infrastructure involved in the recent breach disclosure. plala: plala is an internet connection service offered by Sony Network Communications under the S course tier. It had customer information including names and connection IDs exposed in the same database intrusion that affected So-net. The service remains part of the broader portfolio managed by the subsidiary. So-net: So-net is an internet service provider brand operated by Sony Network Communications offering broadband connections and email services in Japan. It experienced unauthorized access to its member database leading to exposure of personal details for its current and recent former customers. The service is one of the primary channels affected in the October disclosure. Sony Network Communications: Sony Network Communications is a Sony subsidiary that provides internet connection and related digital services in Japan. It disclosed the unauthorized access to its member database and is managing the response including server shutdowns and notifications to authorities. The company operates the So-net and plala services impacted by the incident. Incident Response: Sony Network Communications shut down the compromised servers immediately after discovering the access and reset affected email passwords on October 27. Data Exposure Details: No credit card data or bank PINs were included in the leaked information, and no secondary harm linked to the breach has been identified to date. Regulatory Notification: The company reported the incident to Japan's Personal Information Protection Commission and is conducting further investigation into the cause and scope.

Categories

tech
View Original Tweet