gcdRadar
closedclosed 12 Nov 2026Breaches & attacks4 Confirmed real-world loss

Data breach at Sony-owned internet provider compromises 2.6 million records

So-net member database

Attackers broke into the So-net member database operated by Sony Network Communications, exposing personal information of over 2.58 million customers and email passwords for 54,401 users. The company disclosed the unauthorized access after confirming the information leak.

why this severityConfirmed real-world PII breach affecting millions of users.

affected
So-net member database
first report
28 Oct 2026
last update
29 Oct 2026

Timeline · 1

  1. 28 Oct 2026Data breach at Sony-owned internet provider compromises 2.6 million customer records

Sources · 3

News and write-ups

  1. 2026-10-28
    Data breach at Sony-owned internet provider compromises 2.6 million customer records
    Help Net Security · helpnetsecurity.com/2026/10/28/sony-network-communications-data-breach-so-net
  2. 2026-10-28
    Sony ISP subsidiary data breach exposes 2.5 million customer records
    BleepingComputer · bleepingcomputer.com/news/security/sony-isp-subsidiary-data-breach-exposes-25-mi
  3. 2026-10-29
    Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
    SecurityWeek · securityweek.com/hackers-steal-2-6-million-records-from-sonys-japanese-isp-so-ne

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
4 · Confirmed real-world loss
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened Oct 2026 (approx.) · first reported 28 Oct 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-10-28 14:26Z · updated 2026-11-13 00:11Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Data breach at Sony-owned internet provider compromises 2.6 million records

https://gcdradar.vercel.app/incidents/data-breach-at-sony-owned-internet-provider-compromises-2-6 · AIR-2026-1610 · closed 2026-11-12

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed real-world PII breach affecting millions of users.
- Fix status: No fix needed
- First reported: 2026-10-28 (happened 2026-10)
- AI role: No AI role
- Products: So-net member database

## Summary

Attackers broke into the So-net member database operated by Sony Network Communications, exposing personal information of over 2.58 million customers and email passwords for 54,401 users. The company disclosed the unauthorized access after confirming the information leak.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Affected and fixed versions

- Affected: So-net member database

## Latest updates

- 2026-10-28: Data breach at Sony-owned internet provider compromises 2.6 million customer records (https://helpnetsecurity.com/2026/10/28/sony-network-communications-data-breach-so-net)

## Sources

- 2026-10-28 Help Net Security: Data breach at Sony-owned internet provider compromises 2.6 million customer records https://helpnetsecurity.com/2026/10/28/sony-network-communications-data-breach-so-net
- 2026-10-28 BleepingComputer: Sony ISP subsidiary data breach exposes 2.5 million customer records https://bleepingcomputer.com/news/security/sony-isp-subsidiary-data-breach-exposes-25-million-customer-records
- 2026-10-29 SecurityWeek: Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net https://securityweek.com/hackers-steal-2-6-million-records-from-sonys-japanese-isp-so-net

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
  2. live8.6
    UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability

    Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713

  3. live
  4. live
    University of Texas at Arlington discloses data breach from cyberattack

    Breaches & attacks · Exploited · since 13 Nov 2026

  5. live
  6. live