On March 22, 2022, a link to a site with an interactive map appeared in the media and various Telegram channels, on which, according to the addresses, customer data from the leak of the Yandex.Food service was plotted. Yandex is aware of this situation. The company clarified that this is not a new leak, but a visualization of data from a leak that occurred at the end of February.
“There have been no new information security incidents since March 1. We are talking about the leak, which Yandex.Food reported on March 1 and then notified all affected users by e-mail, ”the press service of the service said.
On the map, you can find the following customer data: full name, phone number, address up to the apartment, email, total spending in Food for six months.
For security reasons, does not publish a link to this resource. If a link appears in the comments to a post, they will be closed. Please don't post it here.
Currently, access to this site with a card is blocked on the territory of the Russian Federation by all providers.
According to data on this leak from the DLBI leak search and monitoring service for the dark web, Yandex.Food information appeared in the public domain on February 27. There was an archive with three SQL dumps containing a total of 49,441,507 (49.4 million) order rows, including the following columns and data:
names and surnames of customers, as they are recorded in the user profile of the service;
phone numbers - in total there are 6,882,230 unique numbers from the Russian Federation (almost all regions) and Kazakhstan and 206,725 from Belarus;
full delivery address of the client;
comments to the order;
the download contains order dates from 06/19/2021 to 02/04/2022.
An example of unloading from the leaked database of the Yandex.Food service.
On March 1, the information security service of Yandex.Food spoke about the discovery of a data leak. A press release from the company says that it occurred due to the unfair actions of one of the employees. The company also applied to law enforcement agencies with a statement about unauthorized access to customer data and is doing everything to prevent the dissemination of published information.
bbabo.Net