INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Sony's So-net ISP Exposed to Massive Data Breach Attack

| 2026-10-29 11:00 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
Hackers have stolen the personal information of current and former So-net and Plala internet subscribers in Japan, Sony Network Communications announced on October 27. Nearly 2.6 million records were impacted, with approximately 2.14 million belonging to So-net subscribers and 443,000 to Plala (S Course) subscribers. The attackers broke into the So-net member database on October 19, obtaining names, dates of birth, gender, phone numbers, email addresses, user IDs, and internet connection IDs. By resetting passwords for impacted email addresses, Sony Network Communications aimed to prevent unauthorized use of customers' email addresses. The breach also affected 16 records containing bank account details, but credit card data was not involved as it is not stored by So-net.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
JP
Incident Timeline
‎March 2026
Hackers stole approximately 2.6 million records from Sony's Japanese ISP So-net, including personal data and email credentials of users who left services in March 2026 or later.
general_metric 293,000 Entities
Roughly 293,000 of them relate to people who left the services in March 2026 or later, as their details are kept for some time to handle final bills and support requests.
organisation Data Breach
Related : Hackers Steal 1.8 Million Records From Nikkei Related: 240,000 Hit by Data Breach at Japan’s Digital Agency Related : Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
organisation Japan’s Digital Agency
Related : Hackers Steal 1.8 Million Records From Nikkei Related: 240,000 Hit by Data Breach at Japan’s Digital Agency Related : Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
organisation Cyberattack Disrupts Operations
Related : Hackers Steal 1.8 Million Records From Nikkei Related: 240,000 Hit by Data Breach at Japan’s Digital Agency Related : Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
data_breach 1.8 Records
Related : Hackers Steal 1.8 Million Records From Nikkei Related: 240,000 Hit by Data Breach at Japan’s Digital Agency Related : Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
data_breach 240,000 Records
Related : Hackers Steal 1.8 Million Records From Nikkei Related: 240,000 Hit by Data Breach at Japan’s Digital Agency Related : Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
organisation Mail Service
The hackers also obtained approximately 54,000 email addresses, along with their passwords, belonging to four additional mail services: Mail Service (G), A-Box, So-net VAIO Mail, and the PostPet email account service.
organisation VAIO Mail
The hackers also obtained approximately 54,000 email addresses, along with their passwords, belonging to four additional mail services: Mail Service (G), A-Box, So-net VAIO Mail, and the PostPet email account service.
organisation PostPet
The hackers also obtained approximately 54,000 email addresses, along with their passwords, belonging to four additional mail services: Mail Service (G), A-Box, So-net VAIO Mail, and the PostPet email account service.
data_breach 16 records
The breach also impacted 16 records containing bank account details, such as the bank and branch, account type, account number, and account holder’s name.
‎October 19
Threat actors broke into the So-net member database on October 19.
‎October 23
Threat actors exploited a vulnerability to gain unauthorized access, resulting in the theft of 2.6 million records from So-net's targeted server on October 23.
‎October 27
Threat actors stole 2.6 million records from Sony's Japanese ISP So-net on October 27, prompting the company to reset passwords for affected email addresses.
‎2026/10/29
Threat actors used phishing attacks to target So-net, a Japanese internet service provider owned by Sony Network Communications.
organisation Sony
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net.
organisation ISP
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net.
data_breach 2.6 Records
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net.
Nearly 2.6 million records were impacted.
Tactical Metrics
Metrics
data_breach
1,800,000
Records
Related : Hackers Steal 1.8 Million Records From Nikkei Related: 240,000 Hit by Data Breach at Japan’s Digital Agency Related : Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
Metrics
data_breach
240,000
Records
Related : Hackers Steal 1.8 Million Records From Nikkei Related: 240,000 Hit by Data Breach at Japan’s Digital Agency Related : Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
Metrics
data_breach
2,600,000
Records
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net.
Nearly 2.6 million records were impacted.
Metrics
data_breach
16
Records
The breach also impacted 16 records containing bank account details, such as the bank and branch, account type, account number, and account holder’s name.
Intelligence Sources
SecurityWeek 2026-10-29