Sozar.ru

A significant data breach occurred at the Union of Zoos and Aquariums of Russia website Sozar.ru during 2023. The incident resulted in the unauthorized exposure of personal information belonging to approximately 154000 users. Security researchers identified that the compromised data included personal identifiers and login credentials. The passwords were encrypted using the bcrypt hashing algorithm which provides some level of protection but remains a risk if the salts are accessible. The leak appears to stem from a vulnerability in the web platform or a database misconfiguration allowing external actors to extract the user table.