Sony Network Communications says unauthorized access on October 19 exposed roughly 2.58 million member records from So-net and plala. The leaked data covers names, phone numbers, emails, user IDs, birth dates, and gender. Bank account details were also taken in 16 cases, and email passwords for about 54,000 addresses were compromised. Credit cards were not affected. The company stopped the targeted server and blocked the source after confirming the breach on October 23. Most of the risk sits in the personal data, not the bank details. That volume of names, emails, and phone numbers makes phishing and account recovery attacks the more immediate problem. Sony Network is contacting affected users while it investigates the cause. Services remain online.