Sony Subsidiary Confirms Breach Exposing 2.58 Million Customer Records
Summary
Sony Network Communications confirmed unauthorized access to its So-net database, exposing 2,585,481 customer records and 54,401 email addresses with passwords. As of October 27, neither company had confirmed misuse of the exposed data.
Key points
- Sony Network Communications said an unauthorized party accessed its So-net member database on October 19; the company detected the breach four days later and shut down the compromised servers.
- The investigation confirmed exposure of 2,585,481 records, including names, phone numbers, email addresses, user IDs, dates of birth, gender and internet connection IDs.
- A further 54,401 email addresses from several email services were exposed with account passwords; the company advised users to change their passwords.
- The reported records comprise 2,141,986 So-net entries and 443,495 plala (S Course) records, affecting NTT Docomo Hikari customers.
- NTT Docomo warned customers about phishing emails and fake websites impersonating its d POINT Club and a Universal Studios Japan campaign.
- Sony reported the incident to Japan’s Personal Information Protection Commission and is investigating its cause and scope; as of October 27, neither company had confirmed misuse of the exposed data.
Article Details
- Victim Organization
- Sony Network Communications
- Incident Type
- Unauthorized access to a customer database and exposure of personal information
- Incident Date
- 2026-10-19
- Disclosure Date
- 2026-10-27
- Data Types Exposed
- Full names
- Phone numbers
- Email addresses
- User IDs
- Dates of birth
- Gender
- Internet Connection IDs
- Account passwords
- Affected Records
- 2,585,481 customer records were exposed. An additional 54,401 email addresses from several email services were exposed with account passwords.
- Operational Impact
- Sony Network Communications shut down the compromised servers and blocked external communication after detecting the breach. As of October 27, neither company had confirmed misuse of the exposed data in the wild.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed
Vendors
NTT DocomoThe latter impacts another internet service provider, NTT Docomo, which contracts Sony Network Communications to provide its Docomo Hikari services.Sony Network CommunicationsSony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information.
Products
d POINT Clubnotified customers about the breach and warned of phishing emails and fake websites impersonating its d POINT Club and a Universal Studios Japan (USJ) campaign, falsely claiming that recipients had won and promptingDocomo HikariThe latter impacts another internet service provider, NTT Docomo, which contracts Sony Network Communications to provide its Docomo Hikari services.plala (S Course)In the breakdown of exposed records, Sony Network Communications says there are 2,141,986 So-net entries and 443,495 plala (S Course) records.So-netIn an announcement yesterday, the company said that its So-net member database, supporting its internet access service, was accessed by an unauthorized party.