Sony Confirms Massive Data Breach Affecting Millions of So-net and Plala Users in Japan
Sony Network Communications has confirmed a massive cyberattack exposing personal data in Japan, as reported by Planeta Red. The incident compromised sensitive details across two major internet services operated by the Japanese conglomerate: the So-net ISP and the Plala fiber plan.
Unauthorized actors infiltrated the company database on October 19, 2026.
Servers Disconnected and Attack Blocked After October Detection
Sony Network Communications disabled the So-net infrastructure promptly upon discovering the intrusion on October 23, 2026. Technical teams blocked incoming communication from the hackers to halt further data extraction. By October 24, internal evaluations established the precise scale of the compromised user records.
Public notification followed on October 27, when the company issued an apology on the official So-net website. The platform confirmed an unauthorized intrusion into its connection service database. Company representatives stated that management takes the incident very seriously and will continue reviewing security measures and information management systems. Hemos confirmado una filtración provocada por un acceso no autorizado a la base de datos de usuarios del servicio de conexión a Internet So-net, ofrecido por Sony Network Communications Inc.,
se lee en la publicación. Pedimos disculpas por las graves molestias y la preocupación que esto ha causado a nuestros clientes y a todas las partes afectadas.
Sony faces criticism for not detailing security measures after the data leak.
Detailed Breakdown of Compromised User Information
The breach impacted 2,141,986 members of the So-net service alongside 443,495 users registered under the Plala (S Course) fiber plan, totaling over 2.5 million affected accounts. Exposed data fields vary by user but include full names, user IDs, email addresses, telephone numbers, dates of birth, gender details, and internet access IDs.
Attackers also accessed functional email account passwords belonging to 54,401 customers. Financial data exposure remained limited to 16 individuals, with Sony confirming that account numbers and bank names were compromised but security PINs were excluded. The company asserted that credit card numbers and expiration dates were not stored on the targeted servers and remained unexposed.
Broader Security Fallout Across Japanese Technology Sector
This incident arrives amid an ongoing wave of cyberattacks targeting Japanese technology companies and software developers. Japan has been at the center of an avalanche of hacks in various companies in the country resulting in the data theft of millions of users, a situation that has occurred as concerns about Artificial Intelligence's ability to detect security breaches have grown. In the world of video games, Warhorse Studios, developer of Kingdom Come: Deliverance, also confirmed it was the victim of a cybercriminal blow. In recent years, companies like Yahoo, Equifax and Facebook have also suffered massive leaks.
Users are urged to modify account credentials immediately and avoid reusing passwords across multiple platforms. Due to the theft of authentic names and email addresses, experts warn customers to remain vigilant against targeted phishing campaigns designed to exploit the exposed data. Experts recommend acting fast by watching bank account movements and checking closely for any strange charges or unrecognized direct debits during the coming weeks.
Related reading