Sony Network Communications has confirmed a significant data breach affecting approximately 2.5 million users of its consumer-facing So-net internet service brand and associated platforms. Unauthorized actors gained access to internal servers, compromising sensitive personal records that include names, phone numbers, email addresses, and user IDs. While the exact entry method remains undisclosed, the intrusion was detected on October 23, several days after the initial breach occurred on October 19.
The fallout extends beyond direct So-net subscribers, touching infrastructure utilized by external providers. Over 440,000 compromised records originated from services tied to NTT Docomo, which relies on Sony Network Communications' underlying network architecture. Affected users across both platforms have been warned to remain highly vigilant against potential phishing attempts, suspicious text messages, and fraudulent communications leveraging the leaked details.
Although the vast majority of exposed files avoided credential leakage, smaller segments of the user base suffered direct exposure of specific sensitive information. This includes email passwords for specialized mailbox services and a limited number of bank account records totaling 16 accounts. Sony officials confirmed that banking PINs were not stored on the targeted servers and thus remained secure.
Law enforcement agencies and Japan's Personal Information Protection Commission have been officially notified of the incident. Sony stated that compromised servers were isolated immediately upon discovery of the breach. To date, no hacking collective has publicly claimed responsibility for the cyberattack, and affected customers are receiving individual notifications regarding the security status of their accounts.
Comments