Roskomnadzor drew up a protocol against Yandex.Food for leaking courier data

"Roskomnadzor drafted and filed in court an administrative protocol against Yandex.Food LLC for providing illegal access to the personal data information system, which led to the illegal distribution of personal data from courier services," TASS writes with reference to the agency press. Service.

The protocol was drawn up under Part 1 of Art. 13.11 of the Code of Administrative Offenses of the Russian Federation, which entails a fine of up to 100 thousand rubles.

Information about the publication of a database with personal data of Yandex.Food and Delivery Club couriers on the network initially appeared on social networks. The databases contain information about the last name and first name, the encrypted password, the email address and the telephone number.

• At the end of February, there was a major data leak from Yandex.Food users. On March 22, the attackers opened a site with a map, where the data of the users of the service could be viewed with the total amount of orders for the last six months. Customers of the service went to court with a class action lawsuit over the leak.
• Roskomnadzor blocked a resource where compromised personal data of customers of various companies was collected.
• In late June, Food allowed users to delete information about their orders on the service. It was reported that such an opportunity will soon appear for Yandex.Lavka.
• Since February 2022, the authorities have been discussing the issue of corporate liability for personal data leaks. The Ministry of Digital Development proposed introducing churn fines, but later softened its position and agreed not to introduce fines for the first revealed fact of a leak.