On April 10, 2023, hackers offered for sale a database of users from Kassy.ru, a Russian aggregator of tickets for various events. Subsequently, the website was temporarily shut down to address the vulnerability. The leaked data comprises user and order tables, including usernames, full names, phone numbers, cities, email addresses, dates of birth, and MD5-hashed passwords.
Compromised data: booking_id,type,ts_id,ts_booking_id,ts_barcode,token,ts_proculture_id,ts_proculture_org_id,session_id,user_id,client_name,client_phone,client_email,descr,ticket_template,price_margin,state,export_booking_msk_id,payment_type,print_receipt,is_extended,covid_checks,is_archive,is_email_send,dt_email_send,is_email_open,dt_email_open,is_ticket_download,is_sync,patch,patch_send,path_error,error_descr,dt_create,dt_expire,dt_update
Compromised data: booking_id,type,ts_id,ts_booking_id,ts_barcode,token,ts_proculture_id,ts_proculture_org_id,session_id,user_id,client_name,client_phone,client_email,descr,ticket_template,price_margin,state,export_booking_msk_id,payment_type,print_receipt,is_extended,covid_checks,is_archive,is_email_send,dt_email_send,is_email_open,dt_email_open,is_ticket_download,is_sync,patch,patch_send,path_error,error_descr,dt_create,dt_expire,dt_update