Data breach at Sony-owned internet provider compromises 2.6 million records
So-net member database
Attackers broke into the So-net member database operated by Sony Network Communications, exposing personal information of over 2.58 million customers and email passwords for 54,401 users. The company disclosed the unauthorized access after confirming the information leak.
why this severityConfirmed real-world PII breach affecting millions of users.
- affected
- So-net member database
- first report
- 28 Oct 2026
- last update
- 29 Oct 2026
Timeline · 1
Sources · 3
News and write-ups
- 2026-10-28Data breach at Sony-owned internet provider compromises 2.6 million customer recordsHelp Net Security · helpnetsecurity.com/2026/10/28/sony-network-communications-data-breach-so-net
- 2026-10-28Sony ISP subsidiary data breach exposes 2.5 million customer recordsBleepingComputer · bleepingcomputer.com/news/security/sony-isp-subsidiary-data-breach-exposes-25-mi
- 2026-10-29Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-netSecurityWeek · securityweek.com/hackers-steal-2-6-million-records-from-sonys-japanese-isp-so-ne
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- No AI role
- categories
- General security
- severity
- 4 · Confirmed real-world loss
- targets
- Not applicable
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- tags
- data-breachsony
- dates
- happened Oct 2026 (approx.) · first reported 28 Oct 2026
- origin
- News & research feeds
- record
- confidence 0.95 · created 2026-10-28 14:26Z · updated 2026-11-13 00:11Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Data breach at Sony-owned internet provider compromises 2.6 million records https://gcdradar.vercel.app/incidents/data-breach-at-sony-owned-internet-provider-compromises-2-6 · AIR-2026-1610 · closed 2026-11-12 - Lane: Breaches & attacks - Severity: 4 (Confirmed real-world loss): Confirmed real-world PII breach affecting millions of users. - Fix status: No fix needed - First reported: 2026-10-28 (happened 2026-10) - AI role: No AI role - Products: So-net member database ## Summary Attackers broke into the So-net member database operated by Sony Network Communications, exposing personal information of over 2.58 million customers and email passwords for 54,401 users. The company disclosed the unauthorized access after confirming the information leak. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Affected and fixed versions - Affected: So-net member database ## Latest updates - 2026-10-28: Data breach at Sony-owned internet provider compromises 2.6 million customer records (https://helpnetsecurity.com/2026/10/28/sony-network-communications-data-breach-so-net) ## Sources - 2026-10-28 Help Net Security: Data breach at Sony-owned internet provider compromises 2.6 million customer records https://helpnetsecurity.com/2026/10/28/sony-network-communications-data-breach-so-net - 2026-10-28 BleepingComputer: Sony ISP subsidiary data breach exposes 2.5 million customer records https://bleepingcomputer.com/news/security/sony-isp-subsidiary-data-breach-exposes-25-million-customer-records - 2026-10-29 SecurityWeek: Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net https://securityweek.com/hackers-steal-2-6-million-records-from-sonys-japanese-isp-so-net Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveDixell refrigeration units Multiple vulnerabilities discovered in Dixell refrigeration units
Patch now · Exploited · since 13 Nov 2026
- live8.6UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability
Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713
- liveCity of Osaka municipal systems City of Osaka suffers data breach impacting one million residents
Breaches & attacks · Real loss · since 13 Nov 2026
- liveUniversity of Texas at Arlington discloses data breach from cyberattack
Breaches & attacks · Exploited · since 13 Nov 2026
- livePDF viewers Genuine PDF Forgeries: Attacking Signature Verification via Human Factors
Research · since 13 Nov 2026
- liveAMD SEV-SNP Mior and Skyfall Attacks Target AMD SEV-SNP VMs
Research · since 13 Nov 2026