Every public data breach

44 disclosed this week · 26,355 on record

Indian Railways

Disclosed Jan 10, 2020583,377 accountsUnverified

In November 2019, the website for Indian Rail left more than 2M records exposed on an unprotected Firebase database instance . The exposed data included 583k unique email addresses alongside usernames and passwords stored in plain text.

What is known

People affected583,377 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJan 10, 2020
HappenedOct 28, 2019
AttackNot stated
Data exposedEmailsPasswords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Indian Railways