So-net member database breach, So-net and plala (S course) members

What leaked9

• Plain-text passwordmail passwords of 54,401 So-net addresses on four mail services (Mail Service · G, A-Box, Sonet VAIO Mail, PostPet mail account service), which let a third party read and send mail; for 7 members also the My Page password from a password-reset notice; So-net reset them
• Bank account numberbank account details of 16 So-net members · bank, branch, account type, number, holder name; So-net does not hold the PIN
• Mobile numberphone number · type not stated
• Other profile datainternet connection ID
• Usernameuser ID for the So-net My Page

To-dos5 · about 1 h 30 min in all

1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
3. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover, SMS code theft
4. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
5. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover