Lafool: Ashita Survey breach exposes 209 employees' stress-check results and other data

Lafool detected suspicious access on 27 October, disabled abused credentials and blocked the source. It reported data acquisition to reseller Ashita no Team on 30 October. The reseller disclosed it on 4 November and its parent on 5 November; their own systems were not reported breached. [1] [2]

The affected cohort is 209 people at three reseller clients, with names, departments, employee numbers, answers, short-survey results and stress-check results among the fields. This is neither a finding that every field was taken for everyone nor a provider-wide total. Publication and misuse have not been found; client names are not disclosed. [1] [2]