Skip to content

Indian Railways

Disclosed Jan 10, 20206 years ago583,377 accountsUnverified

In November 2019, the website for Indian Rail left more than 2M records exposed on an unprotected Firebase database instance . The exposed data included 583k unique email addresses alongside usernames and passwords stored in plain text.

What is known

People affected583,377 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJan 10, 2020
HappenedOct 28, 2019
AttackNot stated
Data exposedEmails, Passwords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Indian Railwayshaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataJan 10, 2020583,377
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Indian Railways

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.