← Incident database

corona-cloud-2026 · Disclosed 2026-08-28

コロナ: unauthorized access and impact

Unauthorized access affected an external construction-information cloud service. Names, addresses and related construction documents for up to 35,000 customers may have leaked.

Supply chain / CICause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    Unauthorized access affected an external construction-information cloud service.

    [s1]§§1-3
  • Reported fact

    Names, addresses and related construction documents for up to 35,000 customers may have leaked.

    [s1]§§1-3

Timeline

  1. Disclosure date established by the reviewed notice. [s1]

Reported response

  • Reported fact

    All user accounts were disabled and reset.

    [s1]§§1-3

Cause and mitigation hypotheses

Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.

Evidence relevant to prevention

Insufficient evidence

Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

The initial entry mechanism and actual exfiltration scope are undisclosed; this is not attributed to another vendor without evidence.

Sources

  1. [s1] コロナ · Primary source

    コロナ:事故に関する公表資料 ↗

    Reviewed 2026-10-09