Security Knowledge
← Incident database

corona-cloud-2026 · Disclosed 2026-08-28

コロナ: unauthorized access and impact

Unauthorized access affected an external construction-information cloud service. Names, addresses and related construction documents for up to 35,000 customers may have leaked.

Supply chain / CICause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    Unauthorized access affected an external construction-information cloud service.

    [s1]§§1-3
  • Reported fact

    Names, addresses and related construction documents for up to 35,000 customers may have leaked.

    [s1]§§1-3

Timeline

  1. Disclosure date established by the reviewed notice. [s1]

Reported response

  • Reported fact

    All user accounts were disabled and reset.

    [s1]§§1-3

Evidence relevant to prevention

Insufficient evidence

Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

The initial entry mechanism and actual exfiltration scope are undisclosed; this is not attributed to another vendor without evidence.

Sources

  1. [s1] コロナ · Primary source

    コロナ：事故に関する公表資料 ↗

    Reviewed 2026-10-09