Sony ISP subsidiary data breach exposes 2.5 million customer records
Sony Network Communications has confirmed a data breach that compromised about 2.5 million records containing current and former customers’ personal information.

Sony Network Communications has confirmed a data breach that compromised about 2.5 million records containing current and former customers’ personal information.
The breach occurred on October 19 and was detected four days later, when the company shut down the compromised servers and blocked external communication.
The investigation confirmed that a total of 2,585,481 customer records had been exposed, including the following types of information: An further 54,401 email addresses from several email services were also exposed along with account passwords.
NTT Docomo also notified customers about the breach and warned of phishing emails and fake websites impersonating its d POINT Club and a Universal Studios Japan (USJ) campaign, falsely claiming that recipients had won and prompting them to enter personal information to claim tickets.
Telecommunications giant KDDI suffered a breach affecting 12 million customers, and IDC Frontier was targeted by ransomware , and the Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
In an announcement yesterday , the company said that its So-net member database, supporting its internet access service, was accessed by an unauthorized party.
Nippon Columbia malware incident exposes 8.6 million karaoke fan records
One of the most recent is the incident at GMO Internet Group and its Onamae Desktop Cloud service, which suffered a widespread malware attack on customer servers .
Once attackers are using valid credentials, prevention drops sharply.
Sony reported the incident to Japan’s Personal Information Protection Commission and is investigating its cause and scope.
What happened
Sony Network Communications has confirmed a data breach that compromised about 2.5 million records containing current and former customers’ personal information.
The breach occurred on October 19 and was detected four days later, when the company shut down the compromised servers and blocked external communication.
What changed
The investigation confirmed that a total of 2,585,481 customer records had been exposed, including the following types of information: An further 54,401 email addresses from several email services were also exposed along with account passwords.
NTT Docomo also notified customers about the breach and warned of phishing emails and fake websites impersonating its d POINT Club and a Universal Studios Japan (USJ) campaign, falsely claiming that recipients had won and prompting them to enter personal information to claim tickets.
Who is affected
Telecommunications giant KDDI suffered a breach affecting 12 million customers, and IDC Frontier was targeted by ransomware , and the Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Why it matters
In an announcement yesterday , the company said that its So-net member database, supporting its internet access service, was accessed by an unauthorized party.
Nippon Columbia malware incident exposes 8.6 million karaoke fan records
Technical details
One of the most recent is the incident at GMO Internet Group and its Onamae Desktop Cloud service, which suffered a widespread malware attack on customer servers .
Once attackers are using valid credentials, prevention drops sharply.
Response
Sony reported the incident to Japan’s Personal Information Protection Commission and is investigating its cause and scope.
Attribution
BleepingComputer: Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information.