Mail.ru

Named alongside Yandex in a purported credential dataset, and subject to the same Russian legal framework - data localisation requirements, SORM lawful-interception infrastructure, and state access provisions that no terms of service can contract around. The assessment here is identical to Yandex and is recorded as one structural finding rather than two independent ones. For a US or EU user, any privacy rights nominally granted by these services are unenforceable in practice, which makes the published policy close to irrelevant as a decision input.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass.

Data sharing

Same broad category as Yandex above — both were named together in a purported 2022 leak (later assessed by researchers as mostly a recompilation of older, previously-leaked credential lists rather than a fresh breach) reportedly affecting nearly 5 million accounts (figure not re-verified this pass) across Yandex, Mail.ru, and other Russian email services combined. Mail.ru operates under the same Russian data-localization/jurisdiction considerations as Yandex (see that row).

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.