Yandex confirmed the publication of old source codes from the internal repository
The Yandex company confirmed the publication of old source codes of individual projects from the internal repository.
The company noted that a repository is a tool for storing code and working with it. It is not intended to store the personal data of users.
“There was no hacking of Yandex. The security service found code fragments from an internal repository in the public domain. However, their content differs from the current version of the repository, which is used in Yandex services, the press service reported on January 26.
They stressed that an internal investigation into the reasons for getting fragments of the source code into open access is already underway. At the same time, the company does not see any threat to user data or platform performance.
Earlier, source codes and accompanying data for several Yandex services and programs appeared on the Web. The total volume of compressed archives was 44.7 GB.
On March 1, 2022, the information security service of Yandex.Food delivery service revealed an information leak. The base covered the entire territory of the Russian Federation and some other countries, including Belarus and Kazakhstan.
On March 23, Roskomnadzor issued an administrative protocol to Yandex Food and blocked the site with leaked data.
In early August, the Investigative Committee of Russia opened a criminal case into the leak. A corresponding request was sent by State Duma deputy from the United Russia faction Mikhail Romanov, who said that he had applied to the Investigative Committee because the damage had been done to citizens. He explained that the personal data of users of the service could be in the possession of criminals.
On November 9, a court in Moscow satisfied the claims of 13 Yandex. Food users who suffered from a data leak in the application. The court decided to pay the victims 5,000 rubles each as compensation.
