Data breach at Sony-owned internet provider compromises 2.6 million customer records - Help Net Security
Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed.
Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed.
So-net is a Japanese internet service provider run by Sony Network Communications, part of the Sony Group.
the company said in a notice published on October 27, apologizing to customers for the great inconvenience and concern the incident has caused.
No information leaks have been found in NURO, the company’s fiber internet service, or its other services, according to the notice ; the attack on the database took place on October 19, and the company confirmed it on October 23.
In both cases, the leaked information includes names, phone numbers, email addresses, user IDs, dates of birth, gender and internet connection IDs.
Customers who canceled their subscriptions by the end of February 2026 are not affected.
The company lists the cause of the breach as unauthorized access by a third party and says the investigation is ongoing.
The stolen So-net records belong to 1,869,771 current members and 272,215 people who left the service in March 2026 or later, for a total of 2,141,986.
Sony Network Communications said it takes the incident seriously and will keep looking into its cause In a separate incident that adds to Sony’s security troubles this week, reports spread on X from PlayStation Network (PSN) users who say their accounts were hijacked and unknown child accounts were added to their family groups without permission.
At the time of writing, Sony Interactive Entertainment had not confirmed a vulnerability, named a cause or released a statement about the reports.
An investigation completed the next day established that personal data had leaked and identified the categories of information and the number of records involved.
These passwords were reset on October 27 to prevent the damage from spreading, and affected users must set new ones through the So-net My Page portal.
Data from seven notices issued to members for password resets was exposed as well, and those passwords have been reset; affected customers will be contacted individually, and a dedicated phone line and an FAQ page have been set up .
What happened
Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed.
So-net is a Japanese internet service provider run by Sony Network Communications, part of the Sony Group.
the company said in a notice published on October 27, apologizing to customers for the great inconvenience and concern the incident has caused.
What changed
No information leaks have been found in NURO, the company’s fiber internet service, or its other services, according to the notice ; the attack on the database took place on October 19, and the company confirmed it on October 23.
Who is affected
In both cases, the leaked information includes names, phone numbers, email addresses, user IDs, dates of birth, gender and internet connection IDs.
Customers who canceled their subscriptions by the end of February 2026 are not affected.
Why it matters
The company lists the cause of the breach as unauthorized access by a third party and says the investigation is ongoing.
The stolen So-net records belong to 1,869,771 current members and 272,215 people who left the service in March 2026 or later, for a total of 2,141,986.
Technical details
Sony Network Communications said it takes the incident seriously and will keep looking into its cause In a separate incident that adds to Sony’s security troubles this week, reports spread on X from PlayStation Network (PSN) users who say their accounts were hijacked and unknown child accounts were added to their family groups without permission.
At the time of writing, Sony Interactive Entertainment had not confirmed a vulnerability, named a cause or released a statement about the reports.
Response
An investigation completed the next day established that personal data had leaked and identified the categories of information and the number of records involved.
These passwords were reset on October 27 to prevent the damage from spreading, and affected users must set new ones through the So-net My Page portal.
What security teams should do
Data from seven notices issued to members for password resets was exposed as well, and those passwords have been reset; affected customers will be contacted individually, and a dedicated phone line and an FAQ page have been set up .
What remains unknown
No information leaks have been found in NURO, the company’s fiber internet service, or its other services, according to the notice .
Sony Network Communications said it takes the incident seriously and will keep looking into its cause In a separate incident that adds to Sony’s security troubles this week, reports spread on X from PlayStation Network (PSN) users who say their accounts were hijacked and unknown child accounts were added to their family groups without permission.
Attribution
Help Net Security: Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed.
What to watch next
Watch for additional victim details, indicators of compromise and follow-on exploitation reports.