I think what happened was that the text was converted twice. First time from cyrillic into html '&-codes', second time from the already-converted ampersand-codes - which changed the ampersands to & - which displays a & - and left the rest unchanged.

(My Mudcat Browser Tools addon does such conversion automatically, btw. I remember having to handle this 'double converstion' problem.)