Sony Network Communications ma’lumotlar buzilishini tasdiqladi, bu taxminan 2,5 million yozuvni o‘z ichiga olgan hozirgi va sobiq mijozlarning shaxsiy ma’lumotlarini buzib kirgan.
Sony Group Corporation sho‘ba korxonasi bo‘lgan kompaniya telekommunikatsiya va texnologiya xizmatlarini taqdim etadi va Yaponiyada internet-provayder (ISP) sifatida faoliyat yuritadi.
Buzilish 19-oktabrda sodir bo‘lgan va to‘rt kun o‘tib aniqlangan, shunda kompaniya buzilgan serverlarni o‘chirgan va tashqi aloqani bloklagan.
Kecha e’lon qilingan bayonotda kompaniya o‘zining internetga kirish xizmatini qo‘llab-quvvatlovchi So-net a’zolari ma’lumotlar bazasiga ruxsatsiz tomon kirganini aytdi.
Tekshiruv natijasida jami 2 585 481 mijoz yozuvi fosh bo‘lgani tasdiqlandi, jumladan quyidagi turdagi ma’lumotlar:
- To‘liq ismlar
- Telefon raqamlari
- Elektron pochta manzillari
- Foydalanuvchi IDlari
- Tug‘ilgan sanalar
- Jins
- Internet ulanish IDlari
Hech qanday bank, to‘lov kartasi yoki boshqa hisob ma’lumotlari fosh bo‘lmagan.
Shuningdek, bir nechta elektron pochta xizmatlaridan 54 401 ta elektron pochta manzili ham hisob parollari bilan birga fosh bo‘lgan. Kompaniya foydalanuvchilarga parollarini o‘zgartirishni tavsiya qiladi.
Fosh bo‘lgan yozuvlar taqsimotida Sony Network Communications 2 141 986 ta So-net yozuvi va 443 495 ta plala (S Course) yozuvi borligini aytadi. Ikkinchisi boshqa internet-provayder — NTT Docomo’ga ta’sir qiladi, u Sony Network Communications bilan o‘zining Docomo Hikari xizmatlarini taqdim etish uchun shartnoma tuzgan.
NTT Docomo ham mijozlarga buzilish haqida xabar berdi va d POINT Club va Universal Studios Japan (USJ) kampaniyasini taqlid qiluvchi fishing elektron pochta xabarlari va soxta veb-saytlar haqida ogohlantirdi, ular qabul qiluvchilarga yutib olganini va chiptalarni olish uchun shaxsiy ma’lumot kiritishni so‘raydi deb yolg‘on da’vo qiladi.
Docomo voqea hozirgi Hikari xizmati mijozlari va oldingi olti oy ichida bekor qilganlarga ta’sir qilishini aytadi.
Sony voqeani Yaponiyaning Shaxsiy ma’lumotlarni himoya qilish komissiyasiga xabar qildi va uning sababi va ko‘lamini tekshirmoqda.
27-oktabr holatiga ko‘ra, hech bir kompaniya fosh bo‘lgan ma’lumotlarning yovvoyi tabiatda noto‘g‘ri ishlatilganini tasdiqlamagan.
Yil boshidan beri Yaponiyadagi yuqori qiymatli kompaniyalar va provayderlarga ko‘plab kiberhujumlar qaratilgan.
Eng so‘nggi voqealardan biri GMO Internet Group va uning Onamae Desktop Cloud xizmati bilan bog‘liq, u mijoz serverlarida keng tarqalgan zararli dastur hujumiga uchragan.
Telekommunikatsiya giganti KDDI 12 million mijozga ta’sir qilgan buzilishga uchradi va IDC Frontier ransomware bilan nishonga olindi.
Avvalroq, NTT 2025-yil boshida tizimlariga kirib, 18 000 korporativ mijoz ma’lumotlarini o‘g‘irlagan xakerlar tomonidan hujumga uchragan.
Ma’lumotlar buzilishining so‘nggi tezligi shunchalik misli ko‘rilmagan va tahdidli bo‘ldiki, Yaponiya hukumati dushanba kuni shoshilinch yig‘ilishlar o‘tkazib, javob rejasini tuzdi.
Hujumchilar haqiqiy hisob ma’lumotlariga ega bo‘lgach, ularning harakatlarining faqat 37 foizi bloklanadi
Umumiy oldini olish ballari dastlabki kirishdan keyin nima sodir bo‘lishini yashirishi mumkin. Hujumchilar haqiqiy hisob ma’lumotlaridan foydalanayotganda, oldini olish keskin pasayadi.
Blue Report 2026 mijoz ishlab chiqarish muhitlarida o‘tkazilgan 338 million simulyatsiya bo‘yicha texnika-texnika himoyani o‘lchaydi.
Hisobotni oling
Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information.
A Sony Group Corporation subsidiary, the company provides telecommunications and technology services, acting as an internet service provider (ISP) in Japan.
The breach occurred on October 19 and was detected four days later, when the company shut down the compromised servers and blocked external communication.
In an announcement yesterday, the company said that its So-net member database, supporting its internet access service, was accessed by an unauthorized party.
The investigation confirmed that a total of 2,585,481 customer records had been exposed, including the following types of information:
- Full names
- Phone numbers
- Email addresses
- User IDs
- Dates of birth
- Gender
- Internet Connection IDs
No banking, payment card, or other account details were exposed.
An additional 54,401 email addresses from several email services were also exposed along with account passwords. The company advises users to change their passwords.
In the breakdown of exposed records, Sony Network Communications says there are 2,141,986 So-net entries and 443,495 plala (S Course) records. The latter impacts another internet service provider, NTT Docomo, which contracts Sony Network Communications to provide its Docomo Hikari services.
NTT Docomo also notified customers about the breach and warned of phishing emails and fake websites impersonating its d POINT Club and a Universal Studios Japan (USJ) campaign, falsely claiming that recipients had won and prompting them to enter personal information to claim tickets.
Docomo says the incident affects all current Hikari service clients and those who canceled within the preceding six months.
Sony reported the incident to Japan’s Personal Information Protection Commission and is investigating its cause and scope.
As of October 27, neither company had confirmed misuse of the exposed data in the wild.
Since the start of the year, multiple cyberattacks have targeted high-value companies and providers in Japan.
One of the most recent is the incident at GMO Internet Group and its Onamae Desktop Cloud service, which suffered a widespread malware attack on customer servers.
Telecommunications giant KDDI suffered a breach affecting 12 million customers, and IDC Frontier was targeted by ransomware.
Previously, NTT was hit in early 2025 by hackers who gained access to its systems and stole the data of 18,000 corporate customers.
The recent rate of data breaches is so unprecedented and threatening that the Japanese government held urgent meetings on Monday to plan its response.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report