Indian ticketing platform’s unsecured server exposed personal info of 700,000 passengers

guest · Aug 24, 2020

Indian ticketing platform’s unsecured server exposed personal info of 700,000 passengers
August 24, 2020
https://thenextweb.com/security/202...r-exposed-personal-info-of-700000-passengers/

An unsecured server of the Indian ticket platform RailYatri exposed the personal information of over 700,000 passengers. The details in the database included full names, phone numbers, addresses, email IDs, ticket booking details, and partial credit or debit card numbers.

The Indian railway network is one of the busiest transportation systems around the world, catering to over 24 million passengers daily. RailYatri is primarily designed for ticketing booking tickets and train information.
The exposed server was found by a team of researchers led by Anurag Sen at Safety Detectives, a cybersecurity company. Sen and his team found the exposed Easticsearch server on August 10 with 43GB data.
Click to expand...

However, on August 12, a Meow attack cut down most of the data, and the size was reduced to 1GB. For uninitiated, Meow attack is a new type of attack that deletes unsecured databases that run Elasticsearch, Redis, or MongoDB.

The information stored in RailYatri’s server can reveal a lot about a person, including their address and travel plans. This can be used by attackers or malicious actors to create targeted hacks for these people.
Click to expand...

Safety Detective: Primary Indian ticket vendor suffers crippling data breach

One of India’s most popular travel booking hubs was left exposed without adequate security measures, and subsequently, suffered a significant data breach that exposed all production server information and led to the loss of over 43GB of data.
Click to expand...

Log in or Sign up

Indian ticketing platform’s unsecured server exposed personal info of 700,000 passengers

guest Guest

Log in or Sign up

Indian ticketing platform’s unsecured server exposed personal info of 700,000 passengers

guest Guest

Useful Searches