Yandex, often referred to as “Russia’s Google” and a major technological staple in the country, recently faced a significant breach where a massive 45-gigabyte cache of its source code was leaked publicly. This code, apparently shared by a disgruntled employee, while not divulging user data, offers an unparalleled insight into the operations of Yandex’s myriad services, particularly its web analytics and behavioural analytics tools.
A deep analysis by Kaileigh McCrea, a privacy engineer, reveals the company's extensive data collection practices, which could map individuals' habits and interests in potentially intrusive ways.
Amidst these revelations, Yandex is undergoing a significant transition, separating its Netherlands-based parent company from its Russian operations following Russia's invasion of Ukraine. This separation raises concerns regarding Yandex's future relationship with the Kremlin and the potential risks associated with data misuse.