Sony Music Solutions: Sony Music Shop cache settings showed other customers' data

Design and testing deficiencies in a cache feature introduced February 13, 2025 could show registration inputs to other users; a customer reported it February 20. The February 16, 2026 final report identified 21 people whose registration data may have been displayed through February 20 at 17:55, and five people whose accounts were accessible through incorrect Amazon/Rakuten linking until March 5 at 20:34. Fields included names, addresses, phones, emails, genders and birth dates; the account-linking issue also exposed order histories and last four card digits, expiry dates and cardholder names. The initial investigation scope was up to 658 users on both sides of the display. The final report withdrew the suspected inquiry-form impact. Overlap between the 21- and five-person groups was not specified.