Story perspectives

Sony Discloses So-net Breach Exposing 2.6M Customers

By Drooid · Oct 30, 2026 · How we work

Read the story

Story summary

Summary

Sony Network Communications disclosed a breach affecting 2,585,481 customers on October 19, 2026.
Exposed data included names, phone numbers, email addresses, dates of birth and gender.
Stolen credentials comprised 54,401 email addresses and passwords from four So-net mail services.
Sixteen bank account records showing bank names and numbers were exposed.
Sony reset the email passwords on October 27, 2026 and urged users to create new ones.

Summary

Company reported the breach to Japan’s Personal Information Protection Commission and began an internal review.
A weekday phone line (0120-36-8887) fields breach-related inquiries.
Sony advises users to change passwords only via the official My Page, not email links.
Former So-net and plala customers who cancelled after March 2026 stay exposed, risking phishing attacks with their stolen data.

History

In November-December 2013, Target’s POS systems were infected with BlackPOS malware, exposing credit-card data of more than 40 million shoppers across roughly 1,800 U.S. stores. The breach triggered FTC enforcement, a $162 million settlement and dozens of lawsuits, prompting industry-wide security reforms. Sony’s October 19 2026 breach of 2.58 million users therefore follows the same regulatory-driven response pattern established after Target’s incident.

1 of 3

In November-December 2013, Target’s POS systems were infected with BlackPOS malware, exposing credit-card data of more than 40 million shoppers across roughly 1,800 U.S. stores. The breach triggered FTC enforcement, a $162 million settlement and dozens of lawsuits, prompting industry-wide security reforms. Sony’s October 19 2026 breach of 2.58 million users therefore follows the same regulatory-driven response pattern established after Target’s incident.

1 / 3