Lafool legacy survey system breach exposes data of 24,232 employees
Unauthorised access to the legacy system for Lafool’s survey service resulted in the unauthorised acquisition of information on 24,232 employees at 182 companies. The leaked information also included some stress test and physician consultation records. Lafool suspects that an access key contained in a test image previously made public on the internet was exploited, and announced the incident and apologised on 9 November 2026. It said the system currently in use was not affected.
Key facts
- Affected organisation
- Lafool
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Information on 24,232 employees at 182 companies
- Cause / method
- Suspected exploitation of an access key contained in a test image made public on the internet by a contractor
- Location
- Japan
If your data was exposed
Exposed dataHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Lafool announced unauthorised access to its legacy survey system and the information leak, apologised, and said the system currently in use was not affected.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.