Plan
active
Sony ISP subsidiary breach exposes 2.5M customer records
- Engineer — Skip
- SOC/IR — Learn: No IOCs or TTPs published; breach affects a Japanese ISP subsidiary with no enterprise detection surface. Monitor for follow-on phishing campaigns targeting affected customers if relevant to your sector.
- Leader — Plan: Benchmark your own vendor breach-notification SLAs against this incident — Sony’s response timeline and disclosure process offer a reference case for updating your third-party incident response playbook this quarter.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.