Data breach at Sony ISP subsidiary exposes 2.5 million customer records as Japan hit with another major cyberattack

Date:
Thu, 29 Oct 2026 13:05:00 +0000

Description:
Hackers are gunning for Japan's ISPs - and this time it's Sony's turn.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Sony Network Communications discloses breach affecting roughly 2.5 million ISP customers and former users Exposed data included personal details, while some email service users also lost email passwords Company contained the intrusion, notified authorities, and warned customers about phishing and fraud risks A subsidiary of Sony Network Communications, the Japanese tech giants Internet Service Provider (ISP) arm , has confirmed suffering a data breach which saw it lose sensitive data on roughly 2.5 million people.

Among the stolen files were peoples phone numbers, email addresses, and in some cases - email passwords . The company confirmed the news in an apology and notice letter in which it said threat actors accessed So-net, the
companys consumer-facing ISP service brand. The identity of the attackers was not disclosed, and nor was the method they used to break in. The breach happened on Monday, October 19 2026, and was spotted four days later, on October 23. Latest Videos From TechRadar Watch full video here:

Immediately after confirming the incident, we shut down the affected server and blocked communications from the source of the unauthorized access, the machine-translated letter reads. A day later, the investigation determined that the attackers exfiltrated a total of 2,141,986 sensitive records belonging to both current and former members. Trickling down to NTT Docomo Of that number, roughly 1.8 million belong to current members, who had their names, phone numbers, email addresses, user IDs, dates of birth, genders, and internet connection IDs exposed to the hackers. Passwords were not leaked, Sony said. You may like Whopper of a data breach sees Burger King Japan
expose over 11 million customer records Over 8.7 million karaoke fans at risk after major data breach Japanese giant Nippon Columbia says malware
infection was to blame for exposing records Gyazo breach exposes 23.62
million user records and 490 million image records PII and metadata exposed in huge attack

There were also more than 440,000 records taken from plala (S Course), and this part also affects NTT Docomo, a separate internet service provider that uses Sony Network Communications underlying infrastructure as part of its service.

NTT Docomo issued a separate statement, notifying its customers of the incident, and urging them to stay vigilant with incoming emails and other communications: Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

There is a risk of suspicious communications from those who misuse
potentially leaked information in the future, the machine-translated notice reads. Please pay attention to the following points:

Do not respond to emails, SMS, or phone calls

Do not open links in the body What to read next Capcom data breach confirmed around 11.7 million accounts thought to have been affected State Bank of
India reports cyberattack thousands of customer records affected, here's
what we know Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat

Do not open attached files.

The company added that the incident affects all Hikari service clients, as well as those that cancelled from May 2026, onwards.

Some So-net members email addresses and email passwords were, indeed, taken.
A separate set of data affecting Email Service (G), A-Box (an additional mailbox service), So-net VAIO Mail, and PostPet Mail Account Service was nabbed, and the company reported 24,655 affected addresses for Email Service (G), 17,672 for A-Box, 7,005 for So-net VAIO Mail, and 5,069 for PostPet Mail Account Service. The breach affects both current So-net customers, and those that cancelled their subscriptions in March 2026 or later. Those that cancelled by the end of February were not affected, according to the announcement. Banking data struck, too Some customers also had their banking data exposed - but not many. We confirmed the leakage of 16 records
containing bank account information, including financial institution name, bank code, branch name, branch code, deposit account type, account number,
and account holder's name, the company said.

It stressed that it does not hold bank account PINs and therefore, they could not have been compromised. We will individually contact the affected
customers to apologize, the notice reads.

Sony Network Communications said it notified the countrys Personal
Information Protection Commission and other relevant government and law enforcement organizations and is currently investigating the attack.

So far, no hacking groups have claimed responsibility for the attack, and the data has not yet appeared anywhere on the dark web. There is also no word of this being an extortion attempt.

The attack comes less than a week after Japanese internet giant GMO Group
told its customers to scan their computers for viruses, back up all of their data, disconnect the devices from the internet and then shut them down.

Via BleepingComputer The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/data-breach-at-sony-isp-subsidiary-expo ses-2-5-million-customer-records-as-japan-hit-with-another-major-cyberattack


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)