Sony discloses data breach exposing 2.6 million customer records - CyberInsider
Sony Network Communications has disclosed a data breach exposing more than 2.58 million customer records after unauthorized access to its So-net membership database.
The intrusion occurred on October 19 but was discovered on October 23. Sony immediately shut down the affected server and blocked communications from the source of the unauthorized access. The following day, an investigation confirmed that personal information had leaked and identified the affected data categories and record counts.
Customer details exposed
The largest affected dataset contains 2,141,986 So-net membership records, comprising 1,869,771 current members and 272,215 former members. A further 443,495 records concern plala (S Course) customers. Both datasets exposed names, phone numbers, email addresses, user IDs, dates of birth, gender, and internet connection IDs.
Email addresses and their corresponding passwords were compromised for 54,401 customers across four specific services. Additionally, 16 bank account records containing financial details were exposed, though no PINs or credit card information was included.
Response and warnings
Sony reset the compromised email passwords on October 27 to prevent further harm. Affected customers must set new passwords through the official So-net My Page portal. The company has reported the incident to Japan's Personal Information Protection Commission and is continuing its investigation.
As of October 27, Sony said it had not identified subsequent harm arising from the breach, but warned that the exposed information could be used for suspicious communications.
Customers should access the password-reset portal directly and treat unexpected emails, text messages, and calls with caution, avoiding links and attachments in suspicious messages.
Related
