Sony Network Communications: unauthorized access to the So-net member database leaks data of about 2.59 million members

On 27 October Sony Network Communications, which runs the So-net internet service, disclosed that its member database had been accessed without authorization and member data had leaked. The access took place on 19 October; the company noticed it on the 23rd, stopped the servers involved and blocked the source. On the 24th it established which items and how many records leaked: 2,141,986 records of current So-net members and members who left from March 2026, and 443,495 records of current and former plala (S course) members, including names, phone numbers, email addresses, user IDs, birth dates, genders and internet connection IDs. Member login passwords were not included. For 54,401 addresses of the Mail Service (G), A-Box, Sonet VAIO Mail and PostPet mail account services, the mail passwords also leaked, and the company reset those passwords on the 27th. Bank account details of 16 So-net members and 7 password reset notices also leaked. No card data was included, and no leak was found in other services such as NURO. The cause is under investigation; the company reported to the Personal Information Protection Commission and set up a dedicated phone line. No secondary damage had been found as of the 27th.