Overview
- Sony Network Communications says unauthorized access to So-net and plala member databases occurred on October 19 and a follow-up review found 2,585,481 exposed customer records.
- The leaked files include names, phone numbers, email addresses, user IDs, dates of birth, gender and internet connection IDs along with 54,401 email address-and-password combinations and 16 bank account records.
- Sony says it stopped the affected servers, cut off the access source and reset the 54,401 exposed email passwords on October 27 while contacting impacted users and setting up a support phone line and FAQ.
- The company reports no credit card numbers or PINs were found in the breach and that no secondary misuse has been confirmed so far, but it warns customers to ignore suspicious calls, texts or links that could use the leaked data.
- Separate reports from PlayStation Network users about hijacked accounts and added child accounts remain unconfirmed by Sony Interactive Entertainment and investigators continue probing the incident and its cause.