Ultrapart.ru

In May 2024 the Russian online retailer Ultrapart specializing in spare parts for power tools and garden equipment suffered a significant data breach. The incident led to the exposure of approximately 25 thousand customer orders and 15 thousand user profiles. The leaked database includes sensitive personal identifiers and security credentials. Investigations suggest the data was exfiltrated from the company backend systems and subsequently published online by threat actors. The compromised security credentials were stored as MD5 hashes with salt which poses a risk of decryption through brute force attacks.