Yandex Food Data Breach: What Happened in February 2022?

In early February 2022, Yandex Food, a popular food delivery service in Russia, suffered a significant data breach that exposed sensitive information tied to nearly 49.4 million customer records. The breach came as a shock for users who relied on Yandex Food for meal deliveries, as details like names, phone numbers, street addresses, and even social identifiers were leaked. Attackers accessed and exfiltrated this customer data through an external intrusion that compromised the food delivery order system, affecting a huge swath of individual delivery clients across the service area. The news made headlines given the sheer scope of the information at stake and the scale of users impacted, from major cities to smaller regions included in Yandex Food’s delivery network.

What Information Was Exposed?

The breach of Yandex Food led to the exposure of several sensitive data fields. For most users, compromised data included:

• First and last names
• Phone numbers
• Complete delivery addresses (city, street, street number, and additional address fields)
• Social information linked to delivery accounts

This combination of personal information created real concerns about the privacy of Yandex Food’s customers, since full address and contact details are highly sensitive in the context of food delivery and everyday transactions.

How Many Users Were Affected?

Approximately 49,441,482 unique records were exposed during the February 2022 incident. Some records may represent repeat or past customers, but the number clearly indicates a breach touching tens of millions who placed food orders through Yandex Food’s platform at the time. This volume puts it among the largest food delivery data breaches in recent years.

Timeline of the Yandex Food Breach

• February 1, 2022: The breach reportedly occurred, allowing attackers access to the food delivery database.
• After the breach: Leaked information began circulating in online communities, raising awareness about the incident and the type of user data involved.

Yandex Food worked to contain the breach and review its security arrangements after learning about the exposure.

Frequently Asked Questions (FAQ)

What was the Yandex Food data breach?

The Yandex Food data breach in February 2022 involved unauthorized access to the company’s food delivery database, exposing nearly 49.4 million customer records containing names, addresses, phone numbers, and social data.

How many people were affected by the Yandex Food breach?

About 49,441,482 customer records were compromised in the Yandex Food breach, making it a large-scale exposure in the food delivery industry.

What data was leaked in the Yandex Food breach?

The exposed data included full names, phone numbers, physical address details (including city, street, and street number), and certain social information tied to Yandex Food users’ delivery orders.

When did the Yandex Food data breach happen?

The breach took place in February 2022, with attackers gaining access to Yandex Food’s customer information around the start of that month.

How can I check if I'm in the Yandex Food breach?

You can check if your information was part of the Yandex Food breach by utilizing the DeHashed search engine.