This week, 30 million passenger records for users of India’s railways, including names, email addresses, phone numbers, and more, were advertised for sale on a cybercrime website. The Indian Ministry of Railways has refuted claims that it is to blame for any data leak, though.
The Indian Railway Catering and Tourism Corp. was not the victim of data theft, according to the Ministry of Railways after evaluating a sample of the data. IRCTC has assets worth $410 million and is a fully owned subsidiary of Indian Railways, the Ministry of Railways, and the Indian government.