One of India’s most popular travel booking hubs railyatri experienced a data vulnerability incident.
The breach exposed all production server information and led to the loss of over 43GB of data.
The affected Elastic search server was left publicly exposed without password protection or encryption for several days.
The server vulnerability was exposed on 10 August 2020.
Source: https://www.safetydetectives.com/blog/railyatri-leak-report/
"id": "RAI21630123",
"linkid": "railyatri",
"type": "Data Leak",
"date": "08/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"