Indian Railway Catering and Tourism Corporation controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile4 entries
2020
Alleged dark-web passenger-data leak
Reports stated that information relating to more than 900,000 individuals had appeared on the dark web. IRCTC denied that the reported exposure resulted from a breach of its systems.
2020
Use of passenger emails for policy messaging
The use of booking-related email data to distribute government welfare and policy material during the farmers' protests raised questions about consent, data use, and political targeting. IRCTC officials denied selectively targeting Sikh passengers from Punjab.
2018
Travel-insurance application vulnerability
A reported vulnerability in a free travel-insurance arrangement redirected users to an external insurer and potentially exposed information relating to approximately 200,000 passengers. IRCTC discontinued the insurance scheme.
2016
Reported potential user-data exposure
Maharashtra Police reported possible exposure of information connected with millions of IRCTC users. IRCTC and the Centre for Railway Information Systems reviewed the matter, with IRCTC stating that its own data was safe and pointing to the possibility of leakage from information shared with third parties.