[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fT7m0Wz3FDWwrcq-yhyXd-o7uLbkjeSrCiw6OdtSXDug":3},{"article":4,"iocs":45,"watch_terms":46,"solutions":47,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"6e4fa82f-59cf-488a-9502-fe8af0a2126a","Data breach at Sony-owned internet provider compromises 2.6 million customer records","data-breach-at-sony-owned-internet-provider-compromises-2-6-million-customer-rec-0bec1d","Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed. So-net is a Japanese internet service provider run by Sony Network Communications, part of the Sony Group. “We have confirmed an information leak caused by unauthorized access to the member database,” the company said in a notice published on … More → The post Data breach at Sony-owned internet provider compromises 2.6 million customer records appeared first on Help Net Security.","Sony Network Communications disclosed a data breach at its Japanese ISP subsidiary, So-net, impacting over 2.58 million current and former customers. Attackers gained unauthorized access to the member database, stealing personal information including names, phone numbers, email addresses, dates of birth, and internet connection IDs. Additionally, email passwords for 54,401 users and 16 bank account records were compromised. The incident has been reported to Japan's Personal Information Protection Commission.","Sony-owned ISP So-net suffers data breach, exposing 2.6 million customer records and email passwords.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F10\u002F28\u002Fsony-network-communications-data-breach-so-net\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002F28091514\u002Fsony-1500.webp","2026-10-28T10:18:09+00:00","2026-10-28T11:00:14.839063+00:00",8,[17,20,23,25],{"name":18,"type":19},"Sony","vendor",{"name":21,"type":22},"So-net","product",{"name":24,"type":22},"NURO",{"name":26,"type":19},"Sony Network Communications","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":27,"icon":29,"name":30,"slug":31},null,"Breaches","breaches",[33,35,40],{"category":34},{"id":27,"icon":29,"name":30,"slug":31},{"category":36},{"id":37,"icon":29,"name":38,"slug":39},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,26,21],{"controls":48,"vendors":133},[49,78,107],{"slug":50,"name":51,"problem":52,"products":53},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":79,"name":80,"problem":81,"products":82},"log-management","Log management and security data pipelines","Security logs are so expensive to collect and keep that teams drop the ones they need when an incident happens.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-onum","Falcon Onum","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-siem\u002Ffalcon-onum\u002F","Real-time telemetry pipeline from CrowdStrike's purchase of Onum. It filters and streams data into Falcon Next-Gen SIEM and can run detections on third-party data before it is stored.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-ai-data-pipelines","Singularity AI Data Pipelines","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fdata-pipelines\u002F","Security data pipelines from SentinelOne's purchase of Observo AI: reduce noisy telemetry, convert data to OCSF and speed up SIEM migrations.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"abstract-security","Abstract Security","\u002Fvendor-logos\u002Fabstract-security.png","abstract-pipelines","Abstract Pipelines","https:\u002F\u002Fwww.abstract.security\u002Fplatform\u002Fcollection","Collects security data from any source, normalises it in the pipeline and routes it to several destinations.",{"slug":108,"name":109,"problem":110,"products":111},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[112,120,128],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":129,"product_name":130,"url":131,"description":132},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":146},"so-net-data-breach-exposes-258-million-customer-records","So-net Data Breach Exposes 2.58 Million Customer Records","Attackers gained unauthorized access to So-net's member database, exfiltrating personal information for over 2.58 million customers, including sensitive data such as email passwords and bank account details. The breach highlights critical failures in protecting stored credentials — email passwords should never be stored in a recoverable form, and sensitive financial data requires additional layers of access control and encryption. The exposure of bank account records alongside personal identifiers significantly elevates the risk of identity theft and financial fraud for affected customers. Regulatory reporting to Japan's Personal Information Protection Commission confirms the incident crosses legal thresholds, underscoring the real-world compliance and reputational consequences of inadequate data protection practices.",[139,140,141,142,143,144,145],"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","GDPR Article 32","CIS Control 3: Data Protection","CIS Control 6: Access Control Management","CIS Control 8: Audit Log Management",{"GDPR Article 32":147,"CIS Control 3: Data Protection":148,"CIS Control 8: Audit Log Management":149,"NIST SP 800-53 SI-2: Flaw Remediation":150,"CIS Control 6: Access Control Management":151,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":152,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":153},"Although this incident falls under Japanese law, Article 32 is directly analogous — it mandates appropriate technical measures such as encryption and access controls to protect personal data, the absence of which enabled this breach.","Storing recoverable email passwords and bank account data without sufficient encryption violates data protection principles; CIS Control 3 requires data to be inventoried, classified, and protected at rest and in transit.","Comprehensive audit logging of database queries and access events would have enabled earlier detection of the bulk data exfiltration and supported faster incident containment.","If the attacker exploited an unpatched vulnerability to gain database access, a formal flaw remediation process mandated by SI-2 would have reduced the attack surface.","The attacker's ability to access the full member database suggests overly permissive access rights; CIS Control 6 mandates least-privilege access and strong authentication to limit exposure of sensitive records.","This control requires timely identification and remediation of technical vulnerabilities in systems holding personal data, which could have prevented or limited the unauthorized database access.","Unauthorized access to the member database indicates insufficient authentication controls; this framework item requires organizations to manage and verify who can access sensitive data systems."]