IRCTC website hacked, info of lakhs feared stolen

[kumarvishwas]

IRCTC website hacked, info of lakhs feared stolen

An IRCTC source said, “The data is a valuable asset and can be sold to corporations who may use it for targeting potential consumers.

Personal data of around 1 crore customers is feared to have been stolen from the server of the e-ticketing portal Indian Railway Catering and Tourism Corporation (IRCTC), thus raising fears of safety and security.

IRCTC is India's largest e-commerce website, lakhs of transactions are conducted every day. Customers provide details like Pan Card numbers while filling up online reservation forms. A senior railway official said, "Somebody can create forged documents on the basis of the stolen data."

An IRCTC source said, "The data is a valuable asset and can be sold to corporations who may use it for targeting potential consumers." IRCTC officials say the Maharashtra government has been alerted. The state's additional chief secretary (home), KP Bakshi, confirmed to TOI that the state police had alerted the railways, but refused to give any more details.

http://telecom.economictimes.indiatimes.com/news/irctc-website-hacked-info-of-lakhs-feared-stolen/52117806

 

[Sarkar]

security is a myth

BTW IRCTC has not been hacked, PRO rubbishes media reports

IRCTC PRO says they have asked Maharashtra Cyber Cell about details of the so-called hack


IRCTC, the Indian Railway Catering and Tourism Corporation Limited, has denied news reports that its data had been hacked. IRCTC PRO Sandip Dutta said: “There has been no hacking attempt on the site. A high-level committee has been formed to probe the matter.”
Earlier, there were reports that the Maharashtra cyber cell has informed IRCTC, India’s largest e-commerce websites and prime platform for booking railway tickets, about a potential data theft.
“We have requested the cyber cell to give us details of the so-called data theft,” Dutta told IndianExpress.com.
Any data theft or hack at IRCTC.co.in could result in the leak of critical information of lakhs of users who book tickets on the site. And given the sheer size of IRCTC, it could be the biggest data theft ever in India’s history.
- See more at: http://indianexpress.com/article/india/india-news-india/irctc-hack-data-theft-2785213/#sthash.5LG4ijmD.dpuf

 

[kumarvishwas]

I guess IRCTC is now covering the matter as this would create panic among customers the next time they book tickets there and moreover trying to hide their mistake for the time as it would be a very big thing if the site is actually hacked :s,actual picture would come clear in coming days

 

[Basil]

IRCTC website 'hacked',

Personal data of around 1 crore customers is feared to have been stolen from the server of the e-ticketing portal Indian Railway Catering and Tourism Corporation (IRCTC), thus raising fears of safety and security.

IRCTC is India's largest e-commerce website, lakhs of transactions are conducted every day. Customers provide details like Pan Card numbers while filling up online reservation forms.

According to a report in India Today, IRCTC officials also fear that details including phone numbers, date of birth and other such information "have been sold in a CD for Rs 15,000 for whosoever was interested."

An IRCTC source said, "The data is a valuable asset and can be sold to corporations who may use it for targeting potential consumers."

There are also reports that the Maharashtra state government has identified the hackers who were selling these details.

AK Manocha, managing director of IRCTC, told Mumbai Mirror that though there has been no official complaint regarding data hacking he has written to Delhi police's cyber cell to inquire into the matter.

When asked why there was no complaint, Manocha said, "We got some information from our internal sources. So we decided to crosscheck." The IRCTC (Indian Railways Catering and Tourism Corporation) website has a user base of over 1 crore, and at least 5 lakh tickets are booked on daily basis.

To log in and book tickets, each user has to create an account, parting with information of his email id and mobile number. The fear among the authorities is that the hacker could have access to at least 1 crore email IDs and mobile numbers. The data will command a huge price among companies in the era of aggressive tele-marketing. Sources said that it is unlikely that credit card or bank data would have been compromised, since the payment gateway takes one out of the IRCTC website to the sites of the banks, which have more watertight firewalls.

The state's additional chief secretary (home), KP Bakshi, earlier confirmed to TOI that the state police had alerted the railways, but refused to give any more details.

IRCTC website is maintained by Centre for Railway Information Systems, which is part of the railway ministry.

http://m.timesofindia.com/tech/tech...-lakhs-feared-stolen/articleshow/52119023.cms