Mir-eks.ru

In May 2023 the Russian travel agency World of Excursions operating via mir-eks.ru suffered a cyberattack resulting in a data breach. A malicious actor published a SQL database dump containing sensitive customer information. The leak exposed personal details of approximately 800 users including their contact information and employment details. Security analysis revealed that user passwords were stored as MD5 hashes with salt which are considered weak by modern security standards. The incident highlights vulnerabilities in the online booking infrastructure of the agency.