So-net and plala (Sony Network Communications) data breach

What happened

Sony Network Communications said on October 27, 2026 that an outsider accessed the member database of its internet service So-net on October 19; it confirmed the access on October 23, shut down the server and cut off the connection. Member records for 2,141,986 So-net customers and 443,495 plala (S course) customers leaked, 2,585,481 in total, including current members and people who left from March 2026 on. The records contain names, phone numbers, email addresses, user IDs, dates of birth, gender and internet connection IDs; member passwords were not leaked. In addition, the email addresses and mailbox passwords of 54,401 So-net mail accounts leaked (the company reset those passwords on October 27), along with bank account details for 16 customers. Credit card information was not included.

What should I do?

1. If you use a So-net mailbox on gyao.ne.jp, gate01.com, pbc.ne.jp, highway.ne.jp, vaio.ne.jp or an A-Box or PostPet address, set a new mail password from the So-net My Page, and change it anywhere else you reused it.
2. Expect phishing emails, texts and calls that use your name, phone number and birth date; don't open links or attachments in unexpected messages that claim to be from So-net or plala.
3. If So-net tells you your bank account details were exposed, watch that account and tell your bank about anything you don't recognize.
4. Check So-net's official notice for updates instead of following links in emails.

More data breaches in Japan →

Check the other services you use →