PHP Vulnerability Responses by Company

CORONA CORPORATION

Companies / web services
Aliases / services
CORONA CORPORATION / 株式会社コロナ / 科罗娜株式会社
Official website
https://www.corona.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Customer information in construction records

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

An October 22, 2026 update confirmed exposed construction files and unauthorized downloads after an August 24 alert. About 24,000 records containing names, addresses and phone numbers were confirmed or potentially affected; this does not mean all were confirmed leaked. Accounts were disabled/reset and MFA introduced. No misuse had been confirmed.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review individual notifications and use the official privacy contact for questions or suspicious communications.

Official service URL

Source URLs

  1. 2026-10-22 Official Customer information in construction records noticehttps://www.corona.co.jp/report/safety/post_152.htmlService and operation documentation
Related official sources
  1. 2026-10-22 Official Customer information in construction records noticeOfficial notice; link to this PHP incident unconfirmedConfirms scope, chronology and user guidance.

Comments