Sony leaked data of 2.58 million users: hackers even obtained passwords

Sony has confirmed a data breach affecting 2.58 million users of Japanese internet services So-net and plala following a hack of systems at one of the group’s companies.

Unauthorized access occurred on October 19, 2026, and on October 24, the stolen data was allegedly published by the perpetrators. The breach affected 2,141,986 So-net records and 443,495 plala records.

Among the exposed data are names, dates of birth, phone numbers, and email addresses. In addition, 54,401 email address and password combinations were discovered, along with 16 records containing banking details.

Sony shut down the affected servers, blocked unauthorized access, and on October 27 reset passwords for potentially compromised email accounts. The company apologized to customers and reported the incident to Japan’s Personal Information Protection Commission. Users were also warned about suspicious messages and links that could be used for fraud.

Although the breach reportedly did not affect PSN accounts, users may want to change their passwords just in case. This is especially inconvenient for Sony amid reports of PSN security issues on October 26 and the upcoming release of GTA VI.

The investigation is ongoing.