Breaches · 12h ago
Sony Network Communications has added that its So-net breach exposed 54,401 email passwords and 16 bank-account records, alongside personal data for more than 2.58 million current and former So-net and Plala customers.
The email passwords belonged to four services: Mail Service (G), A-Box, So-net VAIO Mail, and PostPet. Anyone with an affected password could sign in through ordinary email software or So-net Webmail to read and send messages as the account owner. So-net began forcing password resets for those mailboxes on October 27.
So-net has not disclosed how the attackers got in, and reporting does not establish whether the credentials were used. For affected subscribers, the exposure was the ability to access a mailbox; spillover to other accounts depends on password reuse. The 16 bank records included account details but not PINs.
3 sources covering this story
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.
Sony ISP subsidiary data breach exposes 2.5 million customer records
Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers' personal information.
So-net data breach exposes names, birth dates and phone numbers of 2.58 million Sony internet customers, plus 54,401 email passwords.
Part of the PlainSec briefing for 2026-10-29