Yandex Cloud has issued a security warning to its users following recent disruptions caused by attacks on its infrastructure. The company reports that malicious actors are exploiting the situation by sending phishing emails that claim to offer compensation or report account issues, aiming to steal payment details or login credentials.
The company clarified that it never requests passwords, bank card information, or remote account access via email. Users are advised to verify sender domains and avoid clicking suspicious links. In cases where data has been compromised, Yandex recommends changing passwords, terminating active sessions, and contacting official support.
Due to the ongoing operational constraints, the creation of new resources in the cloud infrastructure is temporarily restricted. However, Yandex has adjusted its billing policy: resources rendered inaccessible by the outages will not be charged. Existing clients will not face service suspension even if their balance reaches zero during this period.
Over the past few days, three Yandex data centers have been targeted by drone attacks. The most recent incident occurred in Vladimir on the night of October 11. Despite the damage, the company confirmed that Yandex Pay user funds and account records remain secure, as data is stored in multiple redundant copies across different locations.
