Zero Radar
← feed
HighData breachupdated 29 Oct 2026, 11:04 UTC

Sony's Japanese ISP So-net breached, millions of customer records exposed

Hackers got into the systems of Sony's internet provider in Japan and copied customer records. Personal details and some login passwords were taken, so affected customers should be careful about phishing and password reuse.

2 independent sources
SeverityHighData breach
Being exploited?UnclearNo reports either way yet
What to doCheck exposureChange your So-net or Plala email password and any accounts that shared it.
How sure is this?2 independent sourcesSeveral independent publishers agree

What happened

Sony Network Communications, which runs the So-net and Plala internet services in Japan, confirmed a breach exposing about 2.5 to 2.6 million records of current and former customers, including 54,401 email account passwords and 16 bank account records.

Why it is dangerous: Exposed personal data and email passwords can be used for scams, phishing, and account takeover, and bank account records raise fraud risk for the people involved.

Are you affected?

You are affected if you are a current or former So-net or Plala customer in Japan.

So-net and Plala customer data held by Sony Network Communications (Japan); versions and specific systems not stated.

What to do

  1. Change the password on your So-net or Plala email account, and on any other account where you reused that password
  2. Be wary of unexpected emails, calls, or messages referring to your account, bank, or personal details
  3. Check your bank and card statements for unfamiliar activity

Timeline

  1. 28 Oct 2026, 16:45 UTC
    Publicly disclosed
  2. 28 Oct 2026, 16:47 UTC
    Picked up by Zero Radar
  3. 29 Oct 2026, 11:00 UTC
    Reported by SecurityWeek · SecurityWeek
  4. 29 Oct 2026, 11:04 UTC
    BleepingComputer reported on it · BleepingComputer

Sources 2 reports, oldest first

Security press established security newsrooms

Technical details

ID
ZR-dac38c36 · ZR-516ab619
Disclosed
28 Oct 2026, 16:45 UTC
On Zero Radar
28 Oct 2026, 16:47 UTC (2 min after disclosure)
Last change
29 Oct 2026, 11:04 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Sony's Japanese ISP So-net breached, millions of customer records exposed · Zero Radar