Yandex.Food

Yandex.Eda LLC is developing a service of the same name for ordering quick delivery of food from restaurants through a mobile application or website. Delivery is carried out by courier services - partners of the Yandex.Eda service and its own restaurant couriers.

History

2023

Obligation to compensate users for the leakage of their data

At the end of November 2023, the St. Petersburg City Court put an end to the proceedings between Yandex.Food users and the service: they demanded compensation from the company for data leakage.

Alexey Kulakov and Mariya Shpynova previously appealed to the court with a demand to recover from Yandex LLC. Food "30 thousand rubles in favor of each plaintiff. The Nevsky District Court of the city decided to refuse claims. At that moment, a man and a woman decided to file an appeal.

The court demanded from Yandex LLC. Food "to pay plaintiffs 5,000 rubles for leaking their data

The court of appeal ruled that Petersburgers are indeed victims in this situation, after which they demanded from Yandex LLC. Food "to pay them 5,000 rubles. This was reported by St. Petersburg TV channel 78 with reference to the press service of the joint press service of city courts.

Alexey Kulakov and Mariya Shpynova are not the first to receive compensation from Yandex.Eda due to a data leak. In September 2023, the City Court of St. Petersburg recovered compensation for moral damage in the amount of 5 thousand rubles from the YandexEda service in favor of local resident Alexander Shatsky. The case concerned the leakage of personal data.

In March 2023, the court refused Shatsky to satisfy the claim, considering it unproven that Yandex.Eda was somehow involved in the leakage of data about it. In response, the plaintiff appealed to the City Court of St. Petersburg, which overturned the decision of the lower instance and made a new one - to pay Shatsky compensation for moral damage in the amount of 5 thousand rubles.

In March 2023, the joint press service of the courts of St. Petersburg announced that residents of the city more than 10 lawsuits against Yandex.Eda demanding moral compensation for the leakage of personal data, the statements include amounts from 30 thousand to 500 thousand rubles.^[1]

Launch of Ultima premium delivery in St. Petersburg

On February 3, 2023, Yandex Eda announced that it had launched Ultima premium delivery in St. Petersburg. So far, it works only in the city center.

Food can be ordered from premium restaurants through Ultima. It will be brought in special packaging (thermal windows and cardboard boxes), which "allows you to maintain the temperature of dishes and deliver them in perfect condition," said Yandex Eda.

There are 30 restaurants available to order for February 2023: Salone pasta & bar, Saviv, Marso Polo, Mio, Kuznyahouse, Mr. Bo, Self Edge Japanese, meat_coin and more. All of them specialize in author's cuisine, cooperate with famous chefs and have awards in the restaurant sphere.

Such orders are delivered by the most experienced Food couriers, each delivered at least 600 orders and underwent additional training. They have special bags and a uniform with the Ultima logo.

While premium delivery is operating in the central part of St. Petersburg, later the zone will be expanded. The cost is calculated in the same way as for regular orders.

Yandex Eda launched the Ultima service in August 2022, until February 2023 the service worked only in Moscow^[2].

2022

Start using Bluetooth beacons in restaurants to monitor couriers and pinpoint delivery times

On December 7, 2022, it became known about the use of Internet of Things technology by the Yandex Eda service. The company places Bluetooth beacons in restaurants to monitor couriers and accurately determine delivery times.

We are talking about the use of the so-called beacon (beacon). They are Bluetooth devices that are installed next to the order window in the restaurant. Beacons exchange radio signals with the courier's smartphone, and when the delivery person appears in the restaurant, information about the arrival time is automatically sent to the server. Unlike other technologies, for example, GPS a tracker, a beacon has consistently high signal transmission quality, low phone power consumption and high accuracy in determining the location of the courier - up to several meters, noted in Yandex"." The prototype of beacons software and for it was developed by a team of engineers and programmers "Yandex Food" and Yandex Go"."

Yandex Food arranges Bluetooth beacons in restaurants

It is assumed that the use of this technology will help make the delivery stage that takes place in the restaurant more transparent. Establishments will receive reports at which points of their network the issuance of delivery orders is delayed, which means they will be able to better establish operational processes on the ground. With the help of the collected data, Yandex Food machine learning algorithms will also show users more accurate forecasts of order preparation for each individual restaurant.

For couriers, the new technology will help them stay away from the restaurant for too long and make it easier to interact with the app. In the future, the delivery person will not have to manually change the status in the application, he will change automatically after the beacon has recorded his arrival at the restaurant. Thanks to this, couriers will be able to carry out more deliveries and increase income, and customers will be able to receive orders faster. Over the past six months, the average time that couriers wait for an order has decreased almost 2 times.

Ability to delete order information

Users can now delete information about their orders in Yandex Ed. Yandex announced this on June 24, 2022. This can be done in your Yandex ID account using a data management tool. The service has launched such an opportunity so that users can independently manage the data stored by Yandex Food.

For June 2022, users can delete delivered and completed orders. The process of deleting them can take up to three days. In the future, it will be possible to erase other information about yourself from Yandex Food - for example, addresses for delivery.

Data deletion is an irreversible process. If you erase information about orders, then you will no longer be able to see the recommendations of your favorite restaurants and dishes in Yandex Food. At the same time, the service will continue to remember the addresses of deliveries and show orders from Yandex Lavka. Soon Yandex ID will add the ability to remove orders and Yandex Shops.

The data management tool is part of the Yandex ID, it is located in the "Account management" section. To access the tool, you need to follow the link and enter the confirmation code - this is an additional security measure. The code is sent to the number associated with the account. Some of the data is deleted immediately, and another part of Yandex stops processing and deletes after a certain period determined by law.

Entering Speed Monitoring for Cycle Couriers

Yandex Food introduces speed monitoring for bike couriers. Yandex announced this on June 16, 2022.

If the average speed of the delivery person's movement is higher than allowed in courtyards, parks and other busy zones, he will receive a warning from the service. Monitoring will help partners comply with the speed limit established in the city and make delivery safer. In the future, couriers will be able to receive warnings about exceeding the permissible speed in real time.

Using algorithms, the service determines the average speed of a cyclist during delivery of orders. If this indicator exceeds the norm - 20 km/h in the residential area - the service will send the delivery person a warning to the courier application with a request to reduce speed and a link to the traffic rules course. If the bicycle courier regularly violates the speed limit, he will be called to the courier center for additional training in traffic rules.

Monitoring has worked in all cities where Yandex Food is available. Soon Yandex.Lovka will also begin to track the driving style of partner cycle couriers.

In the future, Yandex Food will begin to take into account the features of delivery routes and warn partner cyclists about the difficulties that may await them on the way. For example, the service will advise the delivery person to be especially careful if it starts raining or sends a warning before an unregulated railway crossing.

Yandex consistently develops projects that help make travel safer - both for the partner couriers themselves and for others.

In 2021, the service conducted a series of lessons for cycle couriers with a traffic police representative.

In the spring of 2022, before the start of the bike season, Yandex Eda and Lavka launched mobile bicycle diagnostics points - this was valid for couriers who work with any delivery services. For two weeks, delivery workers could check their two-wheeled transport for free and, if necessary, repair it.

Recently, the service, together with the Scientific Center of the BDD of the Ministry of Internal Affairs of Russia, adapted a memo on safe movement in the city for cycle couriers. In this material, the basic rules of traffic rules were described in an accessible language, and also told how to behave in situations with which couriers often encounter. For example, how to move in residential areas where there are children or pets.

Together with partners, Yandex also arranges promotions and makes discounts for couriers - for example, for renting e-bikes.

There was a data leak of tens of thousands of couriers "Yandex.Food" and Delivery Club

At the end of May 2022, it became known about the leakage of data from tens of thousands of couriers Yandex.Eda and Delivery Club. According to the Telegram channel "Information Leaks," files containing more than 700 thousand lines of Yandex.Food courier data were published on the Internet, including surnames, names, patronymics, hashed passwords and phones, unique among them more than 585.2 thousand.

As for Delivery Club, the "merged" database contains more than 521.5 thousand lines, they indicate surnames, names, patronymics, as well as more than 131.6 thousand unique email addresses and more than 132.7 thousand unique telephone numbers, the Telegram channel said.

There was a data leak of tens of thousands of couriers "Yandex.Food" and Delivery Club

A representative of Yandex.Eda, in a conversation with Forbes, said that the security service examined a fragment of the published database and confirmed that the data on partners who deliver orders were in the hands of cybercriminals at the same time as the data on orders in the leak, which the company reported on March 1, 2022.

We did not record new incidents. Since that moment, all Yandex.Food systems have passed a multi-level security audit, data storage policies have been tightened, and the number of employees who have access to sensitive information has been limited, the company told the publication.

Representatives of the Delivery Club also confirmed that the published data of couriers are related to the incident of May 20, when the service discovered a leak of information about customer orders. They added that the service security service by May 31, 2022 is investigating the incident and "is implementing a set of measures to improve the security of internal systems."

The press service of Roskomnadzor reported that the Delivery Club and Yandex.Eda services requested detailed information about the possible leakage of couriers' personal data.^[3]

A fine of 60 thousand rubles for data leakage

On April 21, 2022, the Magistrate's Court in Moscow fined Yandex.Eda service 60 thousand rubles for leaking user data. The corresponding application was filed with the court by Roskomnadzor.

According to TASS, citing the case file, Yandex.Eda leaked personal data, falling under Part 1 of Art. 13.11 of the Administrative Code of the Russian Federation (violation of legislation in the field of personal data). The maximum punishment for this composition is 100 thousand rubles.

Yandex.Food was fined for data leakage

On March 30, 2022, customers of the service filed a class action lawsuit with the Zamoskvoretsky District Court of Moscow. Then 33 applicants demanded that the platform pay 100,000 rubles of compensation to each of them. In the statement, users indicated that after the leak of their personal data on the Internet, they began to receive calls from unfamiliar numbers with advertising offers for various services.

The 33 people are the people who provided all the data and evidence, says Destra Legal's legal director Boris Feldman. - Filing a lawsuit does not prevent the addition of new members of the group. He is registered in court, but not accepted into production. Such personal data cause concerns due to the safety of life and health, the inviolability of the home. Therefore, in this case, one can count on greater compensation for moral damage than usual.

At the same time, Feldman noted that it is unlikely that it will be possible to get 100 thousand rubles. and a successful result will be compensation in the amount of 10 thousand to 30 thousand rubles.

According to the head of Yandex.Eda, Roman Maresov, the service team has minimized the number of employees who have access to private data. In addition, according to Markesov, the service team seeks to block sites and channels that publish leaked data, turns to registrars and cloud storage to separate domains and delete files with information about orders.^[4]

Service operation in Blagoveshchensk and Ussuriysk

Yandex "Food" began to work Blagoveshchensk in and - Ussuriysk thus the service expanded the coverage area in the Far East. Russia This became known on April 15, 2022.

Yandex Food came to this federal district in 2020, and in April 2022 it is one of the regions in countries which the service is developing the fastest. So, in the second half of 2021, the number of orders in the region tripled compared to the same period in 2020. In the Far East, the service already has more than 200 partners - these are local, restaurants the European the Chinese the Japanese kitchens and federal fast food chains, including "." Burger King Yandex Food partner couriers deliver dishes within a radius of 6 km from restaurants; they take an average of 38 minutes to deliver. In Blagoveshchensk, Ussuriysk and other cities of the Far East, the service plans to maximize delivery areas and increase the number of available restaurants so that residents of any areas of these cities can place orders. The service supports establishments that are just starting to work with it and accept no more than 30 orders per month. Food^[5]

Data breach

Yandex.Eda leaked user data. The company announced this in early March 2022.

As a result of unfair actions of one of the employees, the phones of customers and information about their orders were published on the Internet: composition, delivery time, etc., - said in a message from Yandex.Eda, quoted by Vedomosti.

At the same time, the company clarified that the leak did not affect the banking, payment and registration data of users, that is, logins and passwords. On the fact of the incident, the company turned to the police. Service representatives apologize to their users and intend to send a letter with details to everyone affected by the leak. The company notes that measures established by law will be taken against the guilty employee.

Yandex.Eda leaked phones and other customer data

Yandex plans to strengthen the protection of data related to orders to the level of protection of payment information and passwords: "manual processing of such data will be excluded, and the number of employees who have access to information about orders will be reduced by at least three times."^[6]

According to the Telegram channel "Information Leaks," an archive of the Yandex.Food service appeared in the public domain with customer order data with three SQL dumps containing a total of 49,441,507 (49.4 million) lines with orders, including such columns and data:

• Customer names and surnames as recorded in the service user profile
• phone numbers - there are a total of 6,882,230 unique numbers from the Russian Federation (almost all regions) and Kazakhstan and 206,725 from Belarus;
• Full customer delivery address
• Order comments
• The upload contains the order dates from 19.06.2021 to 04.02.2022.

According to the publication Roem.ru, the practice of events in Belarus in 2021 shows that the stolen data of users of Internet services can be used to de-anonymize and harass any user objectionable to people on the Web, which can, theoretically, cause negative consequences in real life. In addition, the data can be used by competing services for targeted advertising on the client base of Yandex.Eda and Lavka.

2021

Roman Maresov - the new general director of Yandex.Eda

On October 4, 2021, it was announced that it had been appointed Romana Maresova CEO of Yandex.Eda. In this position, he will replace Dmitry Masyuk, who will deal with the integrated development of the entire food and food processing business of the company. Its block will include Yandex.Eda, Yandex.Lavka Edadil discount service and consumer goods vertical. Yandex.Market More. here

Yandex buyout of Yandex.Eda stake in Yandex.Taxi

According CNews to the press service Yandex of "," the company will fully buy out from the joint venture (JV) with the company - Uber the group of companies "," Yandex.Taxi shares in Yandex.Eda, "", "Yandex.Delivery," as well Yandex.Lavke as business self-driving cars in rovers. The total amount of the transaction, according to data to Yandex, is estimated at $1 billion. This became known on August 31, 2021. More. here

2020: Market share of ready-to-eat food delivery for September - 10.1% (+ 2.9 pp)

Market Shares of Leading Players in the Ready-Made Food Delivery Market, 2019 - 2020

Notes