Sony's So-net and plala breach exposes 2.58 million internet customer records

Sony Network Communications says an attacker took member data for So-net and plala internet customers in Japan, plus 54,401 email passwords. Card details were not involved.

In this brief: 4 sections 2 min read

- Member records: name, phone, email, user ID, birth date, gender, connection ID
- 54,401 email addresses with passwords, across four So-net mail services
- Bank account details in 16 cases
- No credit card data; NURO and other services not affected
- So-net: 1,869,771 current and 272,215 former members
- plala S Course: 443,495 records, 21,130 of them former members
- People who cancelled by the end of February 2026 are not affected
- The company says it is contacting affected customers individually
- If you use So-net mail, set a new password through So-net My Page before you can use it again
- Change that password anywhere else you used it
- Don't open links or attachments in unexpected messages that use your details
- Be wary of calls asking about your account or bank details
- Oct 19: unauthorized access to the member database began
- Oct 23: the server was stopped and the attacker blocked
- Oct 24: investigation confirmed what was taken
- Oct 27: email passwords reset and notice published

Read full analysis on so-net.ne.jp

Useful?