In a security notice, Yandex said an employee had been providing unauthorized access to users’ email accounts “for personal gain.”
Source: Threadpost