Yandex Dump Data Breach

What happened

In September 2014, news broke of a massive leak of accounts from Yandex, the Russian search engine giants who also provides email services. The purported million "breached" accounts were disclosed at the same time as nearly 5M mail.ru accounts with both companies claiming the credentials were acquired via phishing scams rather than being obtained as a result of direct attacks against their services.

Exposed data

Recommended actions

• Change your Yandex Dump password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Yandex Dump — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.