A Yandex source code repository purportedly stolen by a former worker of the Russian IT giant was exposed on a well-known forum for cybercrime.
There are no personal details because this breach just includes the contents of git repositories. There are at least a few API keys, but they are probably mainly used for deployment testing.
The business said that it is looking into the data leak, but made clear that user data was safe and platform performance was unaffected.
Threat actors may be able to examine the git source code because it is available to the public and uncover flaws that they can use to attack Yandex services.
Source: https://securityaffairs.com/141382/data-breach/yandex-code-repositories-leaked.html
"id": "YAN224381023",
"linkid": "yandex",
"type": "Breach",
"date": "01/2023",
"severity": "25",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"