Corona: unauthorized access to the cloud service for installation records

After receiving an outside tip on August 24 about its installation-record cloud service, Corona disclosed possible exposure affecting up to 35,000 people on August 28. Its October 22 follow-up confirmed that published information matched stored files and that a compromised account had downloaded data. The latest estimate is 24,000 people whose names, addresses, phone numbers and installation documents leaked or may have leaked. Corona identified absent multifactor authentication and a weak password as contributing factors, disabled and reset all accounts, stopped the affected account and strengthened authentication. The origin of the credential leak remains under investigation; misuse has not been confirmed.