Notice Regarding the Potential Leakage of Personal Information Due to Unauthorized Access to a Cloud Service Used by the Company (Apology) [Second Report]
CORONA CORPORATION
Information concerning the external cloud services used by the company and projects for which the company has undertaken construction work
Authentication credentials for a specific account leaked externally were highly likely to have been used by a third party. The absence of multi-factor authentication and insufficient password strength were also factors reflecting deficiencies in authentication management.
No amount stated. The impact on earnings forecasts is considered minor.
The company is continuing its detailed investigation but considers the impact minor. It will promptly disclose any matters requiring disclosure.
Company response
The company is continuing to investigate the cause, identify the scope of the damage and examine the intrusion route in cooperation with external specialists.
Further strengthening of system security measures and monitoring arrangements, and thorough security training for employees
All user accounts have been disabled and reset, accounts subject to unauthorized access have been suspended, passwords have been strengthened and multi-factor authentication has been configured. The company is examining data that may have been leaked and identifying affected individuals, who will be contacted individually on a rolling basis.
The company will promptly disclose any newly identified matters requiring disclosure. It will also promptly announce any matters concerning its results that require disclosure.
| Item | Details |
|---|---|
| Event name | Notice Regarding the Potential Leakage of Personal Information Due to Unauthorized Access to a Cloud Service Used by the Company (Apology) [Second Report] |
| Date of occurrence | 24 August 2026 |
| Date recognized / date notice received | 24 August 2026 (the possibility of a leak was identified following an investigation based on information provided by an external specialist) |
| Subject Entity | CORONA CORPORATION |
| Target Locations / Products | Information concerning the external cloud services used by the company and projects for which the company has undertaken construction work |
| Cause | Authentication credentials for a specific account leaked externally were highly likely to have been used by a third party. The absence of multi-factor authentication and insufficient password strength were also factors reflecting deficiencies in authentication management. |
| Amount of Impact on Business Performance | No amount stated. The impact on earnings forecasts is considered minor. |
| Impact on Earnings Forecast | The company is continuing its detailed investigation but considers the impact minor. It will promptly disclose any matters requiring disclosure. |
| Investigation structure | The company is continuing to investigate the cause, identify the scope of the damage and examine the intrusion route in cooperation with external specialists. |
| Measures to prevent recurrence | Further strengthening of system security measures and monitoring arrangements, and thorough security training for employees |
| Outlook | All user accounts have been disabled and reset, accounts subject to unauthorized access have been suspended, passwords have been strengthened and multi-factor authentication has been configured. The company is examining data that may have been leaked and identifying affected individuals, who will be contacted individually on a rolling basis. |
| Planned follow-up disclosure | The company will promptly disclose any newly identified matters requiring disclosure. It will also promptly announce any matters concerning its results that require disclosure. |
Items this document does not state (13)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The authentication credentials for a specific account were leaked externally and were highly likely to have been used by a third party. In addition, multi-factor authentication had not been configured and the password was not sufficiently strong.