> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Sony Network Communications: a third party obtained So-net user IDs and passwords and changed the email addresses of some customers without their consent

A third party obtained user IDs and passwords and changed the So-net email addresses of some customers without their consent. No leak from the company was confirmed.

Disclosed

2025-07-11

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It announced that it had confirmed cases where some customers' So-net email addresses were changed without their consent after a third party obtained user IDs and passwords. It stopped accepting email address changes to protect customer accounts. [1] [2]

  2. It posted a follow-up announcing that from August 25 the mail user name could be changed once for free and not again. [1]

Impact

No count was published. No leak of IDs, passwords or other data from the company was confirmed. It asked customers to check their login history and change their passwords if they found access they did not recognise. [1] [2]

Timeline

  1. Disclosed 2025-07-11
  2. 1 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Stolen credentials

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]【重要】不正アクセスによるメールアドレス変更について(2025年8月8日追記)Sony Network Communications Inc. · 2025-08-08
  2. [2][News]メールアドレスが意図せず変更される事象確認 ~ So-net へのパスワードリスト型攻撃ScanNetSecurity · 2025-07-16 08:05