Indian Railways denies IRCTC data breach but launches investigation

On December 28, the railways had submitted a data breach alert of the Indian Computer Emergency Response Team (Cert-In) to IRCTC

data protection bill
Photo: Bloomberg
BS Web Team New Delhi
2 min read Last Updated : Dec 30 2022 | 9:49 AM IST
The Indian Railways on Thursday denied claims of a suspected data breach from servers of the Indian Railway Catering and Tourism Corporation (IRCTC).

"In this connection, it may be submitted that Railway Board had shared a possible data breach incident alert of CERT-In to IRCTC reporting a data breach pertaining to Indian Railways passengers," it said in a statement, as reported by PTI. 

"On analysis of sample data, it is found that the sample data key pattern does not match with IRCTC history API. Reported/suspected data breach is not from the IRCTC servers," it added.

However, the railways announced that it had initiated an investigation into the alleged breach.

"All IRCTC Business Partners have been asked to immediately examine whether there is any data leakage from their end and apprise the results along with corrective measures taken to IRCTC," it said.

On December 28, Business Standard reported that the railways submitted a data breach alert of the Indian Computer Emergency Response Team (Cert-In) to IRCTC.

"An incident regarding an Indian Railway data breach has been reported in the media. In this connection it may be submitted that Railway Board had shared a possible data breach incident alert of Cert-In to IRCTC reporting a data breach pertaining to Indian Railways passengers," the Railways said.

"On an analysis of sample data, it was found that the sample data key pattern does not match with IRCTC history API (application programming interface). Reported/suspected data breach is not from the IRCTC servers," it added.

One subscription. Two world-class reads.

Already subscribed? Log in

Subscribe to read the full story →
Subscribe to Business Standard digital and get complimentary access to The New York Times

Quarterly Starter

₹900

3 Months

₹300/Month

SAVE 25%

Smart Essential

₹2,700

1 Year

₹225/Month

Save 46%

Super Saver

₹3,900

2 Years

₹162/Month

Subscribe

Renews automatically, cancel anytime

Here’s what’s included in our digital subscription plans

Access to Exclusive Premium Stories Online

  • Over 30 behind the paywall stories daily, handpicked by our editors for subscribers

Complimentary Access to The New York Times

  • News, Games, Cooking, Audio, Wirecutter & The Athletic

Business Standard Epaper

  • Digital replica of our daily newspaper — with options to read, save, and share

Curated Newsletters

  • Insights on markets, finance, politics, tech, and more delivered to your inbox

Market Analysis & Investment Insights

  • In-depth market analysis & insights with access to The Smart Investor

Archives

  • Repository of articles and publications dating back to 1997

Ad-free Reading

  • Uninterrupted reading experience with no advertisements

Seamless Access Across All Devices

  • Access Business Standard across devices — mobile, tablet, or PC, via web or app

Topics :Indian RailwaysData breachIRCTCBS Web Reportsdata leakage

Next Story