Capcom ID and Sony So-net breaches expose about 14 million customer records in Japan
October 27, 2026 (Access October 19, disclosed October 22 and 27, 2026)
Capcom detected unauthorized access to its CAPCOM ID account service on October 19 and confirmed that email addresses and account details for 11,774,247 accounts were exposed, including creation dates, last-login dates, login counts and last IP addresses. Passwords and card data were not taken, but attackers changed the passwords on 196 accounts, which Capcom reset. Separately, Sony Network Communications confirmed on October 27 that its So-net member database was accessed without authorization on October 19, exposing 2,585,481 records from the So-net and plala services, including 54,401 email addresses with passwords and 16 bank-account records. It detected the intrusion on October 23. Sony says no card data and no PlayStation Network accounts were involved, and the data was reportedly published online from October 24. Neither company has said who was behind its breach or how the attackers got in, and no source reviewed links the two incidents.
Why it matters
Email addresses and login details are enough to power convincing phishing, and for So-net users the exposed email passwords opened a route to account takeover. Sony reset all affected email passwords on October 27, eight days after the intrusion began.
What defenders can take from it
- If you have a CAPCOM ID, So-net or plala account, change the password and anything else that reused it, and expect phishing that mentions the breach.
- Former customers were also in the So-net data, so set a retention limit for cancelled accounts.
- Organizations: detect and announce faster. Sony's customers had no notice for eight days while the data circulated.
Sources
- BleepingComputer: Capcom confirms data breach affecting 11.7 million accounts
- INCIBE-CERT: unauthorised access to CAPCOM ID affecting 11.7 million records
- BleepingComputer: Sony ISP subsidiary data breach exposes 2.5 million customer records
- Help Net Security: data breach at Sony-owned internet provider
- CyberInsider: Sony Network Communications discloses breach of So-net members