Data Leakage & Breach Intelligence (DLBI) reported that hackers from the C.A.S. and UHG allegedly hacked the kassy[.]ru ticketing service for various city events. According to the researchers, the breach affected both information about registered users and their orders, which was put up for sale on the darknet.
A total of 13,897,009 entries were found in the order files, broken down by city, including full names, email addresses (4653,901 unique addresses), telephone numbers (4868 630 unique numbers), identifiers, and dates of orders.
The users table contained 3,003,894 rows, including full names, email addresses (3,003,891 unique addresses), telephone numbers (533,741 unique numbers), hashed (MD5) passwords, user field data, dates of birth (not for everyone), dates of creation and updating of the profile (from January 25, 2018 to April 09, 2023), and city identifiers.
On April 10-11, 2023, the kassy[.]ru website experienced downtime. Violetta Vorobieva, director of marketing at Kassa Ru, told Sib.fm that a cyberattack had been carried out on the site. “We experienced a serious attack and are now restoring the website. We hope to launch it again today,” the company said.
