I've assumed the corruption was cause by someone trying to tamper with it, tunnel into it, reset permissions, or otherwise access it.