Again about phishing: where does the information flow from?

Of course, this has already been written about .
That's what's interesting, until I had an account on money.yandex.ru , phishing spam bypassed me. However, after I had gotten my wallet to an unlighted email address, in about 24 hours, I received a letter of known content. Now letters go regularly, several times a week.

A question to the respected users of the resource, and such a sequence of events does not suggest you that the data flow directly from the depths of Yandex, and with enviable regularity?

With such a degree of protection of private data, one can only hope for the reliability of password hashing in Yandex databases.