Skip to content
Cyber Breaches
Search
Data breachResolved

RailYatri data breach (2022)

In December 2022, India’s government-approved online travel agency RailYatri suffered a data breach. The incident impacted over 31M customers and exposed 23M unique email addresses. Also impacted were names, genders, phone numbers and tickets purchased, including travel information and fares.

Victim
RailYatri
records
23.2M
SectorGovernment
CountryIndia

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2022-12-26, RailYatri was affected by a data breach. Approximately 23,209,732 accounts were exposed. In December 2022, India’s government-approved online travel agency RailYatri suffered a data breach. The incident impacted over 31M customers and exposed 23M unique email addresses. Also impacted were names, genders, phone numbers and tickets purchased, including travel information and fares.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#RailYatri
  2. railyatri.inhttps://railyatri.in

Related incidents

Data breachUnknown

Aadhaar database exposure

Tribune India journalists demonstrated that paid intermediaries could provide full Aadhaar records — including biometric-linked identity data on roughly 1.1 billion Indian residents — for 500 rupees per record.

Victim
Unique Identification Authority of India (UIDAI) / Aadhaar
Records
1.10B
Data breachunresolved

Shanghai National Police database leak

An exposed Shanghai Public Security Bureau database left a hacker known as 'ChinaDan' offering 23 terabytes of data on roughly 1 billion Chinese residents — names, national ID numbers, phone numbers, addresses and police case records — for 10 bitcoin, in what is widely regarded as the largest government data breach in Chinese history.

Victim
Shanghai National Police (Shanghai Public Security Bureau)
Records
1.00B