Sony's So-net ISP member database breached, 2.58 million records and 54,401 email passwords leaked
Teaser from the source
Sony Network Communications, which runs the Japanese internet provider So-net, disclosed on Oct 27 2026 that an attacker got into its So-net member database on Oct 19. It found the access on Oct 23 and shut the server down. Names, phone numbers, email addresses, user IDs, birth dates, gender and internet connection IDs leaked for 2,141,986 So-net members and 443,495 plala (S course) customers of NTT Docomo's Docomo Hikari, including about 293,000 people who left since March 2026, whose details were kept for final billing and support. Email addresses and their mailbox passwords leaked for 54,401 addresses on four mail services, plus 16 bank account records. Member login passwords and card data were not exposed. The cause is still under investigation.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on passwords
Other advisories
- Not ratedosv:CVE-2026-118767Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs
- HighCVE-2026-116683CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
- HighCVE-2026-116683CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
- Not ratedosv:CVE-2026-116683CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
- MediumCVE-2026-60083SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files
- MediumCVE-2026-60083SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files
- HighCVE-2026-110158Chromium CVE-2026-110158: Use after free in Passwords
- MediumCVE-2026-77054boneIO Black stores passwords, including the MQTT broker and web panel passwords, in cleartext. The GET /api/config endpoint returns the full configuration w…
Other news entries
- ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesNewsThe Hacker News
- Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-netNewsSecurityWeek
- AO3 (Archive of Our Own) down for 2-4 weeks after security incident; user database theft not ruled outBreachpwn.watch
- uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsNewsThe Hacker News
- US Federal Election Commission shuts down its e-filing system after attempted intrusion a week before the midtermsBreachpwn.watch
- Blockchain data provider Allium discloses unauthorized access, revokes all API keysBreachpwn.watch
- Dual BIOS: The laptop security feature SMBs don’t know they needNewsCSO Online
- 11 Million Impacted by Capcom Data BreachNewsSecurityWeek
Source: https://pwn.watch/i/sony-so-net-member-database-breach-oct-2026