DKDKCISSP
Data Breaches

Sony ISP subsidiary data breach exposes 2.5 million customer records

Sony Network Communications has confirmed a data breach that compromised about 2.5 million records containing current and former customers’ personal information.

DKCISSP News DeskBleepingComputer28 Oct 2026, 10:15 pm2 min read
Sony ISP subsidiary data breach exposes 2.5 million customer records
Image courtesy of BleepingComputer. Original report
DKCISSP REPORT

Sony Network Communications has confirmed a data breach that compromised about 2.5 million records containing current and former customers’ personal information.

The breach occurred on October 19 and was detected four days later, when the company shut down the compromised servers and blocked external communication.

The investigation confirmed that a total of 2,585,481 customer records had been exposed, including the following types of information: An further 54,401 email addresses from several email services were also exposed along with account passwords.

NTT Docomo also notified customers about the breach and warned of phishing emails and fake websites impersonating its d POINT Club and a Universal Studios Japan (USJ) campaign, falsely claiming that recipients had won and prompting them to enter personal information to claim tickets.

Telecommunications giant KDDI suffered a breach affecting 12 million customers, and IDC Frontier was targeted by ransomware , and the Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.

In an announcement yesterday , the company said that its So-net member database, supporting its internet access service, was accessed by an unauthorized party.

Nippon Columbia malware incident exposes 8.6 million karaoke fan records

One of the most recent is the incident at GMO Internet Group and its Onamae Desktop Cloud service, which suffered a widespread malware attack on customer servers .

Once attackers are using valid credentials, prevention drops sharply.

Sony reported the incident to Japan’s Personal Information Protection Commission and is investigating its cause and scope.

What happened

Sony Network Communications has confirmed a data breach that compromised about 2.5 million records containing current and former customers’ personal information.

The breach occurred on October 19 and was detected four days later, when the company shut down the compromised servers and blocked external communication.

What changed

The investigation confirmed that a total of 2,585,481 customer records had been exposed, including the following types of information: An further 54,401 email addresses from several email services were also exposed along with account passwords.

NTT Docomo also notified customers about the breach and warned of phishing emails and fake websites impersonating its d POINT Club and a Universal Studios Japan (USJ) campaign, falsely claiming that recipients had won and prompting them to enter personal information to claim tickets.

Who is affected

Telecommunications giant KDDI suffered a breach affecting 12 million customers, and IDC Frontier was targeted by ransomware , and the Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.

Why it matters

In an announcement yesterday , the company said that its So-net member database, supporting its internet access service, was accessed by an unauthorized party.

Nippon Columbia malware incident exposes 8.6 million karaoke fan records

Technical details

One of the most recent is the incident at GMO Internet Group and its Onamae Desktop Cloud service, which suffered a widespread malware attack on customer servers .

Once attackers are using valid credentials, prevention drops sharply.

Response

Sony reported the incident to Japan’s Personal Information Protection Commission and is investigating its cause and scope.

Attribution

BleepingComputer: Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information.

MORE IN DATA BREACHES

More cybersecurity reporting

Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesThe Hacker News · 28 Oct 2026, 6:12 pmData breach at Sony-owned internet provider compromises 2.6 million customer records - Help Net SecurityHelp Net Security · 28 Oct 2026, 3:48 pmWarp discloses breach exposing AI agent logs, user telemetry dataBleepingComputer · 27 Oct 2026, 9:45 pmCyberattack on University of Copenhagen exposes data of 525,000 people - Help Net SecurityHelp Net Security · 27 Oct 2026, 5:09 pm