DATA belonging to some members of Russia’s secret police has been leaked after Russian food delivery service Yandex Eats faced a breach.
The leak revealed user names, emails, delivery addresses, phone numbers, and food orders, according to a report from Bellingcat.
Yandex Eats, a subsidiary of a Russian internet company, Yandex, blamed a “dishonest” employee for the breach, The Verge reported.
About 58,000 users’ information was exposed, including an individual linked to the poisoning of Russian opposition leader Alexey Navalny, The Verge said.
Bellingcat identified the name of the person linked with Russia’s Federal Security Service (FSB) to carry out Navalny’s poisoning after scouring a database of phone numbers collated from a previous investigation, The Verge detailed.
This person also used his work email address to register with Yandex Food, allowing researchers to confirm his identity.
Investigators also combed through the leaked data for phone numbers of individuals linked to Russia’s Main Intelligence Directorate (GRU).
In their search, they identified the name “Yevgeny” and were able to tie this person to Russia’s Ministry of Foreign Affairs.
Furthermore, information on Putin’s mistress and their shared “secret daughter” was uncovered.
“Thanks to the leaked Yandex database, another apartment of Putin’s ex-mistress Svetlana Krivonogikh was found,” Russian politician and Navalny supporter, Lyubov Sobol said in a tweet.
“That’s where their daughter Luiza Rozova ordered her meals. The apartment is 400 m², worth about 170 million rubles [~$1.98 million USD]!”
Yandex’s leak was first reported on March 1st, and since then, the food delivery service has been legally threatened by Russian communications regulator Roskomnadzor, according to Reuters.
The regulator said they were planning to launch a case and fine Yandex up to 100,000 roubles (or $1,020 USD).
“Roskomnadzor has drawn up an administrative protocol against Yandex.Eda for violating Russian legislation in the personal data sphere,” the regulator said in a statement.
Yandex Eats noted that “the leak did not affect the banking, payment, and registration data of users, that is, logins and passwords,” per a statement that was published originally in Russian.
“This data is safe. The service team apologizes to users and will send a letter with details to everyone affected by the leak.”
We pay for your stories!
Do you have a story for The US Sun team?