Sony Suffers Massive Data Breach- 2.58 Million So-net and Plala Users Data Exposed

Sony Network Communications has confirmed a breach exposing 2,585,481 customer records linked to its So-net and plala (S Course) internet services.

The company disclosed the incident on October 27, 2026, after finding unauthorized access to its member database. The exposed information includes contact details, account identifiers, and passwords for selected email services.

According to the official So-net notice, the breach affected 2,141,986 So-net records and 443,495 plala records. These figures reflect customer records, not a verified count of unique individuals. Former subscribers are also affected, widening the impact beyond people still using the services.

The leaked member information includes names, telephone numbers, email addresses, user IDs, dates of birth, gender, and internet connection IDs.

Sony said passwords associated with the main membership accounts were not exposed. Credit card information was not included in the compromised data.

Sony Suffers Massive Data Breach

According to Yahoo, credentials for 54,401 email accounts across four Sony services were exposed: Mail Service (G) (24,655), A-Box (17,672), So-net VAIO Mail (7,005), and PostPet Mail (5,069). Sony reset the affected passwords on October 27 to prevent misuse.

CNET Japan reported that the exposed email credentials could have allowed someone to read, send, and receive messages through email software or So-net Webmail.

This does not establish that attackers actually accessed those mailboxes. Users must set new passwords and update saved credentials in their email applications.

Sony also confirmed exposure of 16 bank account records containing details such as bank names, branch information, account numbers, and account holder names.

Bank PINs were not stored. Seven records involving password reset notification documents were also exposed, prompting password resets for those affected.

The unauthorized access occurred on October 19. Sony identified the intrusion on October 23, stopped the affected servers, and blocked communications from the source. Investigators confirmed the information leak and established the affected data categories and counts on October 24.

Sony reported the incident to Japan’s Personal Information Protection Commission. The company has not disclosed how the attacker entered, a specific software flaw, or the attacker’s identity.

Its investigation into the cause and full impact remains ongoing. No information leak involving NURO or other services outside the named groups has been confirmed.

The incident is separate from the previously reported Sony MOVEit data breach, which involved Sony Interactive Entertainment and a different system. No connection between the incidents has been established.

The affected records include 272,215 former So-net members and 21,130 former plala members who canceled from March 2026 onward. Sony said customers who canceled by February 2026 were not affected.

Exposed personal details can fuel convincing scams, so phishing prevention is important. Customers should open the official account website directly, reset passwords for affected email accounts, and avoid unexpected links or attachments. As of October 27, Sony confirmed no resulting secondary harm but warned that suspicious messages could follow.

Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs.

The post Sony Suffers Massive Data Breach- 2.58 Million So-net and Plala Users Data Exposed appeared first on Cyber Security News.