Sony Data Breach has affected over 2 million users (Image via Sony)
The incident hit So-net and plala, two providers owned by Sony Network Communication, and exposed more than 2.58 million customer records. An unauthorized party gained access to its systems on October 19, 2026, according to Sony. The company confirmed that 2,585,481 customer records were affected. The data was reportedly leaked a few days later, on October 24. Sony disclosed the incident on October 27. The total breaks down like this: So-net: 2,141,986 records plala: 443,495 records Email and password combinations: 54,401 identified within the exposed data The exposed data includes a mix of personal details: Names User IDs Dates of birth Phone numbers Email addresses Other customer information 16 bank account records, including account numbers Despite the headline, the bank-related exposure is limited to those 16 records. The 54,401 email and password pairs also matter, since stolen credentials are often tried on other sites. Join conversation Share your thoughts in the comments Be respectful · TOI community guidelines Sony says it took the following steps: Shut down the affected servers Blocked the unauthorized access Reset passwords for the impacted email accounts on October 27 Reported the incident to Japan’s Personal Information Protection Commission The investigation is still ongoing, so the numbers and details could change as more is learned. If you were among the 16 bank account records, contact your bank and monitor your account. The breach arrives soon after Capcom disclosed its own incident on October 22.
Sony has confirmed a major data breach affecting customers of its Japanese internet services.
The company says the breach doesn’t touch PlayStation Network accounts, but the scale and the type of data involved make it worth understanding. It is worth noting that Sony says its investigation found no sign that credit card numbers or expiration dates were taken. The company also says bank PINs aren’t stored in its systems, so they weren’t part of the leak.
The section below takes a detailed look at the Sony data breach. So-net and plala are internet service providers in Japan. They offer broadband, email, and related connectivity, so the breach mainly affects customers in that market rather than gamers on PlayStation. The larger concern is the volume of personal information, which could be used for phishing or social engineering. Sony advises customers not to click suspicious links while it works out the full scope of the breach. Beyond that, sensible precautions include: Watch for phishing emails or texts that use your name or phone number. Change the password on any other account that shares credentials with your So-net or plala login. Use a unique password for each service, ideally through a password manager. PlayStation players aren’t directly affected, but changing your PSN password is a cheap precaution if you want extra peace of mind. Sony has also dealt with an unrelated security issue involving unauthorized child accounts on PSN. Together, these incidents add pressure on the industry’s security practices. Get the latest Sports News and Live updates. Download the TOI app.