Food Delivery Customers Exposed: Yandex Delivery Breach Leaked 569K Records

In March 2022, a database belonging to Yandex Delivery -- the courier and logistics arm of Russian tech giant Yandex -- was breached, exposing 569,382 user records. The leaked data was recieved by threat actors who immediately distributed it across Telegram channels and dark web forums. For a delivery service handling real-world addresses and contact details, the privacy implications are severe.

How Attackers Can Exploit Yandex Delivery Customer Data

A dataset combining phone numbers with full names gives attackers everything needed for vishing (voice phishing) and SMS smishing campaigns. Fraudsters can impersonate delivery companies, tricking victims into handing over payment details or one-time authentication codes. Because phone numbers are tied to banking and two-factor authentication, this breach creates a seperate but serious risk beyond typical credential theft.

What Was Exposed in the Yandex Delivery Breach

• Phone Number
• First Name
• Last Name

Why 569K Russian Delivery Customers Face Ongoing Risk

Delivery service breaches are partcularly dangerous because customers expect to receive communications about packages -- making phishing messages easier to believe. The 569,382 records from the Yandex Delivery breach were distributed across multiple Telegram channels in March 2022 and remain accessible to threat actors today, sustaining the risk of targeted scams and doxxing.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a company's backend data store, often through SQL injection, stolen credentials, or an unpatched server vulnerability. Once inside, they extract user tables and export the data for sale or distribution on dark web forums and messaging platforms like Telegram.

Check If Your Data Was Exposed

HEROIC's DarkWatch monitors over 400 billion breach records across thousands of incidents including the Yandex Delivery breach. Search your email or phone number now to see if your personal information was exposed and set up real-time breach alerts through HEROIC DarkWatch.