corona-cloud-2026 · Disclosed 2026-08-28
コロナ: unauthorized access and impact
Unauthorized access affected an external construction-information cloud service. Names, addresses and related construction documents for up to 35,000 customers may have leaked.
Outcome: Confirmed breach
Entry path and evidence
Timeline
Disclosure date established by the reviewed notice. [s1]
Reported response
- Reported fact
All user accounts were disabled and reset.
[s1]§§1-3
Cause and mitigation hypotheses
Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.
Evidence relevant to prevention
Insufficient evidence
Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
The initial entry mechanism and actual exfiltration scope are undisclosed; this is not attributed to another vendor without evidence.
Sources
[s1] コロナ · Primary source
コロナ:事故に関する公表資料 ↗Reviewed 2026-10-09