No leakage of email and mobile numbers from user profile data of IRCTC E-ticketing system – IRCTC
“About 5.48 lakh tickets were booked in a single day in April 2016 with 2.66 lakh peak concurrent users. About 13,600 tickets per minute were booked.”
Clarification regarding website of IRCTC Which sells E-Ticket of Indian Railways
News Reports have appeared in some Electronic and Print media regarding alleged leakage of email and mobile numbers from user profile data of IRCTC E-ticketing system. Indian Railway Catering and Tourism corporation (IRCTC) is a PSU of Indian Railways. Its website irctc.co.in is used for purchasing Railway E-Tickets.
Firstly, Indian Railways would like to clarify that there has been no hacking of the IRCTC website. The E-ticketing website has been working normally thereby eliminating any chances of unauthorized interference. As soon as the matter came to notice of Railways on 02/05/2016, thorough investigations were conducted to detect veracity of the news, however, no such incident has been detected. The Ministry would like to assure that all necessary Safeguards and security checks are in place for this website. There is a system of regular security audits by concerned departments of government of India. All the components of the system are functioning normal and no unusual activity has been discovered. All sensitive data like passwords etc are stored in encrypted form. In addition to this, 24×7 monitoring of the system is done throughout the year by technical team of experts. Hence there is no cause for any panic or concern. A Railway committee set up couple of days back, in its preliminary report has not found any indication of breach of security in any of the databases of the E‑ticketing system.
The complete facts about the matter is given below:-
The News Reports have appeared in some Electronic and Print media regarding alleged leakage of email and mobile numbers from user profile data of IRCTC E-ticketing system. Indian Railway Catering and Tourism corporation (IRCTC) is a PSU of Indian Railways. Its website irctc.co.in is used for purchasing Railway E-Tickets-ticketing system is managed in-house by CRIS, the IT arm of Indian Railways. The Data centre is in the premises of CRIS. As soon as the matter came to notice of Railways on 02/05/2016, thorough investigations were conducted to detect veracity of the news, however, no such incident has been detected by the technical teams of Centre for Railway Information Systems (CRIS) and Indian Railway Catering and Tourism Corporation (IRCTC).
No “Denial of Service attack” (DoS/DDoS) has been successful and the E-ticketing website has been working normally thereby eliminating any chances of unauthorized interference. About 5.48 lakh tickets were booked in a single day in April 2016 with 2.66 lakh peak concurrent users. About 13,600 tickets per minute were booked.
The E-ticketing system has several components viz., internet gateway, network security devices such as gateway router and Firewall, Application Delivery Controller, Security Information Event Management System (SIEM) web server and database server access logs. Each of the components has been checked and none of the components has been found to have unusual activity. Technical investigations have also not indicated any unusual activity with respect to various system components.
The IT security of E-ticketing system is ensured through regular security audits by Standardization Testing Quality Certification (STQC) directorate of Department of Electronics and IT, Government of India. The entire traffic flowing on E-ticketing system internet gateway is also forwarded to CERT-In in real-time for monitoring and alerting. The gaps reported by STQC in their penetration testing have been addressed. However, auditing is an ongoing process and security audit of E-ticketing system is undertaken biannually.
Audit trails are maintained for access to the system and all sensitive data like passwords etc are stored in encrypted form. In addition to this, 24×7 monitoring of the system is done throughout the year by technical team of experts. Strict physical checks are already in place in the Data centre like restricted access to Data centre, CCTV cameras at entry and exit points of Data centre.
The data of E-ticketing system can be broadly categorized into two categories viz., sensitive information like Debit/Credit Card details, Login ID, Passwords, which could cause potential financial risk. PAN card detail is not required for booking E-ticket. No sensitive data has been alleged to have been leaked.
It is clarified that other data like mobile number and email ids is available with a large number of electronic service providing entities viz., E-commerce firms, telemarketers etc. Email and mobile numbers have to be shared with service providers for providing catering services, cab services, hotel bookings, SMS services, etc. Till now, leakage of data through none of the service providers of IRCTC has been established.
A joint committee comprising of officers from both CRIS and IRCTC has been set up. The committee in their preliminary report has not found any indication of breach of security in any of the databases of the E‑ticketing system. Further investigations by this committee is in progress and once the purported leaked data is made available, further checks will be conducted.
Source: PIB News
Try Our Exclusive Calculators...
CG Pay Calculators
7th CPC Pay & Allowances Calculation Tool
6th to 7th CPC Pay Conversion Tool
6th to 7th CPC Pay & Arrears Calculator
7th CPC Pay & Allowances Calculator in Hindi
First Month Pay Calculator for CG Employees
7th CPC Pay Calculator for Scientists of ICAR
Expected 7th CPC Calculator 2015
GDS Pay and Arrears Calculator 2018
CG Pension Calculators
7th CPC Pension Calculator as per Concordance Tables for Pre-2016 Pensioners
7th CPC Pension Calculator as per Concordance Tables for Pre-2006 Pensioners
Pension Arrears Calculator for Pre-2016 Pensioners as per Notional Basis
Pension Calculator With or Without DP for Pre-2006 Pensioners
Commutation Value of Pension Calculator 2018
7th CPC Family Pension Arrears Calculator for Pre-2016 Pensioners
Defence Pay & Pension Calculators
7th CPC Defence Pay Arrears Calculator
Defence PBOR Pay Calculator as per Gazette Notification issued by MoD on 3.5.2017
7th CPC Defence Pension Calculator Pre-2016 (After Re-Fixing OROP)
DL-33 Arrears Calculator for Pre=-2006 Defence Pensioners
Expected DA Calculators
Expected Additional DA from Jan 2019 Calculation Tool
Expected DA from July 2018 Calculator
Expected DA and DR Calculator from Jan 2018
Expected DA Calculator from January 2016
DA & DR Amount Calculator Updated Sep-18
IDA Calculator to CPSE Employees
Expected Bank DA Calculator from Nov 2018
7th CPC Allowances Search Box With Report Page
Pay Fixation Calculators
7th CPC Pay Fixation on Promotion & MACP Calculator
7th CPC Increment Anomaly Indicator
Promotion Option Calculator as per FR22(I)(A)1
HRA Calculators
7th CPC Expected HRA Calculator 2016 – Updated
7th CPC HRA Calculator as per Cabinet Decision
HRA Income Tax Exemption Calculator for Govt Employees
Income Tax Calculators
Income Tax Calculator – Pre & Post Budget 2017
Income TAx Form 16 Calculator for CG Employees
State Govt Calculators
TN Govt Employees Pay Calculator
Option for Fixation Calculator for Tamil Nadu Govt Employees
Karnataka Pension and Family Pension Calculator
6th SPC Pay Calculator for Karnataka Employees
Revised Pay Calculator for J&K Govt Employees
Rate Finder & Search Box
CSD Auto Dealers Search Tool (Updated June 2018)
CGEGIS Table Benefit Calculator 2017
KVS Transfer 2018: KV & Station Code with Tentative Vacancy Search Tool
Holiday Home Room Rent Finder for CG Employees
CGHS Hospitals Search Tool
GPF Interest Calculator for CG Employees
Professional Tax Calculator for Govt Employees
Civilian Pay Matrix Tables
Pay Matrix Chart for Level 1 to 5 (GP 1800 to 2800)
Pay Matrix Chart for Level 6 to 9 (GP 4200 to 5400)
Pay Matrix Chart for Level 10 to 12 (GP 5400 to 7600)
Pay Matrix Chart for Level 13 to 14 (GP 8700 to 10000)
Pay Matrix Chart for Level 15 to 18 (HAG Scales)
Defence Pay Matrix Tables
Pay Matrix Chart for Level 3 to 5 (GP 2000 to 2800)
Pay Matrix Chart for Level 6 to 9 (GP 4200 to 5400)
Pay Matrix Chart for Level 10 to 12 (GP 5400 to 7600)
Pay Matrix Chart for Level 13, 13A and 14 (GP 8700, 8900 and 10000)
Pay Matrix Chart for Level 15 to 18 (HAG Scales)
Leave a Reply