Reply to post:

"But the firm's incident log says 707 users have lost data."

"707 users lost potentially, hard to tell for certain from the Kibana logs"

How did you derive the first statement from the second?