Indian Railways

The data of over three crore users of Indian Railways was put on sale on the dark web.

IRCTC has also asked all its business partners to immediately examine whether there is any data leak from their end and apprise the results along with corrective measures.

However, in the primary analysis of the sample data, it was found that the key pattern does not match with the IRCTC history application programming interface.

Source: https://timesofindia.indiatimes.com/india/hackers-say-data-of-3-crore-people-on-sale-railways-denies-breach/articleshow/96580561.cms

TPRM report: https://scoringcyber.rankiteo.com/company/indian-railways-new

"id": "ind2121311222",
"linkid": "indian-railways-new",
"type": "Data Leak",
"date": "12/2022",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 'Over three crore users',
                        'industry': 'Transportation',
                        'location': 'India',
                        'name': 'Indian Railway Catering and Tourism '
                                'Corporation (IRCTC)',
                        'type': 'Government Organization'}],
 'data_breach': {'number_of_records_exposed': 'Over three crore',
                 'type_of_data_compromised': 'User Information'},
 'description': 'The data of over three crore users of Indian Railways was put '
                'on sale on the dark web. IRCTC has also asked all its '
                'business partners to immediately examine whether there is any '
                'data leak from their end and apprise the results along with '
                'corrective measures. However, in the primary analysis of the '
                'sample data, it was found that the key pattern does not match '
                'with the IRCTC history application programming interface.',
 'impact': {'data_compromised': 'User Information'},
 'initial_access_broker': {'data_sold_on_dark_web': 'Yes'},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial Gain',
 'title': 'Data Breach of Indian Railways User Information',
 'type': 'Data Breach'}