Cyber crisis at Sony & PlayStation: 2.5 million records leaked as PSN faces ghost account exploit.

Sony and its gaming division, PlayStation, are facing a severe multi-front cybersecurity crisis. In late October 2026, a massive data breach exposed millions of customer records, while simultaneous exploits on the PlayStation Network (PSN) left gamers vulnerable to a bizarre, password-bypassing family management hack.

The So-Net breach: 2.58 million customer records stolen

On 27 October 2026, Sony Network Communications, the conglomerate’s internet service provider branch, officially confirmed a massive cyberattack on its databases.

According to Sony’s disclosure, hackers breached their network on 19 October, though security teams did not detect the intrusion until 23 October. The data leak was subsequently pushed online on 24 October.

• The Scale: A total of 2,585,481 records were stolen across Sony’s Japanese broadband subsidiaries, So-net and plala.
• What was taken: The compromised files include customer names, telephone numbers, user IDs, dates of birth, genders, and internet connection IDs.
• The Password Problem: While Sony initially stated that general member passwords and credit card data were excluded, they later admitted that the breach compromised the exact email passwords for 54,401 legacy email accounts.

The fallout

While this breach primarily targets internet service subscribers rather than mainstream global console gamers, the stolen profile data provides a goldmine for malicious actors to execute highly convincing phishing campaigns and social engineering attacks across the wider Sony ecosystem.

The PSN “Ghost Child” exploitation

Simultaneously, a deeply unsettling security flaw has emerged directly inside the PlayStation Network (PSN). Over the last week, thousands of PlayStation 5 users worldwide have reported finding unauthorized “child accounts” secretly linked to their main profiles under PSN’s Family Management settings.

[Attacker] —> Bypasses 2FA via API Vulnerability —> Attaches “Child Profile” to your PSN

[Unauthorised Purchases charged to your credit card]

• The Password Bypass: Alarmingly, victims report that these phantom family accounts are appearing despite having strong, unique passwords and active two-factor authentication (2FA) enabled.
• The Financial Risk: Because child accounts share the primary account holder’s wallet, hackers have been using this exploit to buy games and digital currency using the victim’s saved credit cards or PayPal info.
• The Catch-22: PSN’s rigid infrastructure makes it incredibly difficult for users to remove a child account once it is bound to a family group, leaving victims trapped in their own accounts while waiting for manual support interventions.

Sony Interactive Entertainment is reportedly investigating the issue following a surge of user reports, but the company has yet to issue a definitive public statement detailing how attackers are bypassing the 2FA protocols.

Support infrastructure and social engineering

Compounding the technical exploits, high-profile content creators and average players alike have noted a critical vulnerability in Sony’s human firewall: customer support social engineering.

Hackers are utilizing easily sourced data, such as a PSN ID or old transaction numbers, to call PlayStation support lines and impersonate the actual owner. In multiple verified cases, support representatives have inadvertently aided hackers by changing the primary email address on file and entirely disabling 2FA. This effectively locks out the true owner, leaving them stranded for weeks while trying to reclaim their digital identity.

The hardware scene: AI and hypervisor backlash

The security drama has extended into PlayStation’s hardware landscape. On 26 October 2026, reports surfaced that Sony paid a $50,000 bug bounty to a security researcher named “Jordy”.

The researcher utilized AI tools to uncover a highly critical “hypervisor” bug within the PS5 console’s architecture. This specific vulnerability allowed for a hardware-level Linux exploit to run on the system.

Sony quietly patched the issue via firmware update 14.20 on 21 October. While praised by enterprise security analysts, the bounty payout sparked intense fury in the PS5 homebrew and jailbreaking community, who accused the researcher of “selling out” an exploit that enthusiasts wanted to keep confidential for console modding.

Essential defensive steps for PSN users

If you have a PlayStation Network account, you should log into your dashboard immediately and implement these security measures:

• Audit Family Management: Navigate to your account settings and check ‘Family Management’. If you see any unrecognized profiles designated as “child” or “adult” members, contact PlayStation support immediately.
• Purge payment information: Delete all saved credit cards, debit cards, and PayPal accounts from your PSN profile. Rely exclusively on prepaid PSN gift cards to fund your wallet so hackers cannot siphon money from your bank.
• Enforce a Purchase PIN: Turn on the setting that requires your account password or a custom PIN at checkout before any purchase can go through on the console store.
• Monitor emails: Keep an eye out for sudden, unexpected notification emails regarding “Password Reset Requests” or “Email Address Changes.” If you receive one without prompting it, your account is actively being targeted.