GoKawiilSony Network Communications breach exposes 2.5 million ISP customer records
Sony Network Communications, a Sony Group subsidiary operating as a Japanese ISP, confirmed that unauthorized access to its So-net member database on October 19 exposed 2,585,481 customer records, including names, phone numbers, emails, user IDs, birth dates, gender and connection IDs. A separate set of 54,401 email accounts had passwords exposed. The breach also affects NTT Docomo's Hikari service customers, since Sony Network Communications provides that service under contract.
GoKawiil's interpretation of the reporting above, not reported fact.
The breach's spread into NTT Docomo's customer base shows how a single vendor compromise can ripple across partner companies and their subscribers, widening the pool of people at risk from phishing and identity theft. Docomo's warnings about fake websites impersonating its loyalty program and a theme-park promotion suggest attackers may already be attempting to exploit the stolen data, according to the company. Regulatory reporting to Japan's Personal Information Protection Commission indicates the incident is being treated as a formal compliance matter while the cause remains under investigation.
- About 2.5 million So-net and plala customer records were exposed, including names, emails, phone numbers and birth dates.
- 54,401 email accounts had passwords exposed; no payment card or banking data was compromised.
- NTT Docomo's Hikari service customers are also affected, and both companies warn of related phishing attempts.
YubiKey 5C NFC Security Key — With millions of Sony ISP customer records exposed including emails, passwords, and personal details, enabling hardware-based two-factor authentication is one of the best defenses against account takeover. The YubiKey 5C NFC lets you secure email, password managers, and other critical accounts so a leaked password alone can't be used to break in. It's a small, durable step that meaningfully raises your account security after breaches like this one.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-28
Published there as: “Sony ISP subsidiary data breach exposes 2.5 million customer records”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.