Biletik.Aero

A database belonging to the Russian air travel booking service Biletik.aero was discovered exposed on the web. The breach involves approximately 215000 user records. The incident occurred due to an insecurely configured database that allowed unauthorized access to sensitive customer information. The leaked data includes personal identifiers such as full names and contact details alongside security credentials stored in a hashed format using MD5 with salt. This exposure puts users at risk of targeted phishing attacks and potential credential stuffing if passwords are decrypted.