Full Breakdown
Sony Network Communications Confirms Massive Data Breach Affecting Millions of So-net and plala Users
By Drooid · · How we work
In this breakdown
01
Breach Overview
Sony Network Communications, the Sony-group company that operates So-net, announced on October 27, 2026 that an unauthorized third-party accessed its member database on October 19, 2026. The intrusion exposed 2,585,481 records covering current and former subscribers of So-net and the plala (S Course) service. Leaked data include names, telephone numbers, email addresses, dates of birth, gender, user IDs, internet-connection IDs, and, for a subset, email-address passwords. Sixteen bank-account records and seven password-reset notifications were also disclosed. Main account passwords and credit-card information were not compromised.
02
Background & Context
So-net, founded in 1995 and wholly owned by Sony, provides residential broadband and email services from Shinagawa, Tokyo. The breach follows recent large-scale Japanese data exposures, including incidents at Sourcenext, Burger King Japan, Yamato Transport, and Capcom ID earlier in October 2026. A prior Sony-related intrusion in May 2011 accessed virtual points rather than personal data.
Visual evidence
Images from the story
03
Timeline of the Incident
- October 19, 2026 – Unauthorized access recorded.
- October 23, 2026 – Sony detects the intrusion, shuts down the affected server and blocks traffic.
- October 24, 2026 – Internal investigation identifies compromised information.
- October 27, 2026 – Public disclosure; email passwords are reset and a support line opened.
04
Data Exposed
Swipe across the table to see all columns.
| Category | Records | Details |
|---|---|---|
| So-net members | 2,141,986 | 1,869,771 current; 272,215 former |
| plala (S Course) members | 443,495 | 422,365 current; 21,130 former |
| Email credentials | 54,401 | Passwords for four services |
| Bank-account records | 16 | Bank name, branch, account type, number, holder |
| Password-reset notices | 7 | Notification documents |
The total reflects database entries, not distinct individuals; the email-credential count is a subset of the membership records.
05
Official Response
Sony took immediate actions: the compromised server was taken offline, traffic from the attacker blocked, and all affected email passwords invalidated on October 27, 2026. Users were required to create new passwords via the So-net “My Page” portal; changes may take up to thirty minutes to propagate. A FAQ was published and a dedicated hotline (0120-36-8887) operates Monday-Saturday, with extended hours on October 27 and November 1. Sony reported the breach to Japan’s Personal Information Protection Commission (PPC) and launched an internal security review. No credit-card data were stored, and services such as NURO and PlayStation Network were not affected.
06
Conflicting Reports & Gaps
Media have rounded the total to “about 2.6 million” records, while Sony’s precise figure is 2,585,481. The cause of the breach remains under investigation; Sony has not identified the attacker, intrusion method, or whether passwords were stored in plaintext or encrypted. The scope could change as the investigation proceeds.
07
Recommended User Actions
1. Reset passwords for any So-net or plala account via the My Page portal; avoid email links.
2. Update email client settings with the new credentials.
3. Watch for unsolicited communications referencing personal details and treat them as potential phishing attempts.
4. Contact the dedicated support line for assistance or to verify account status.
08
What’s Next
Sony continues to cooperate with the PPC and is conducting a comprehensive security review. As of October 29, 2026, no lawsuits or compensation schemes have been announced, and Japanese law provides collective redress only through government-certified consumer organizations. Further updates will be posted through Sony’s FAQ and official communications.