Sony Network Communications: a third party obtained So-net user IDs and passwords and changed the email addresses of some customers without their consent
A third party obtained user IDs and passwords and changed the So-net email addresses of some customers without their consent. No leak from the company was confirmed.
Disclosed
2025-07-11
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It announced that it had confirmed cases where some customers' So-net email addresses were changed without their consent after a third party obtained user IDs and passwords. It stopped accepting email address changes to protect customer accounts. [1] [2]
It posted a follow-up announcing that from August 25 the mail user name could be changed once for free and not again. [1]
Impact
Timeline
- Disclosed 2025-07-11
- 1 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- Entry point
- Stolen credentials
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Tokyo, MinatoInformation and communications
Sony Network Communications Inc.
Sources
- [1][Official]【重要】不正アクセスによるメールアドレス変更について(2025年8月8日追記)Sony Network Communications Inc. · 2025-08-08
- [2][News]メールアドレスが意図せず変更される事象確認 ~ So-net へのパスワードリスト型攻撃ScanNetSecurity · 2025-07-16 08:05