IRCTC is one of India's biggest e-commerce websites and caters to lakhs of customers everyday. The railway tourism website was hacked and data of around one crore users is said to have been stolen by hackers, who seem to be selling it in CDs worth Rs 15000 each.

Given the user base IRCTC covers, crores of people post their personal data like phone numbers, date of birth and Pan Card numbers, which can be used for making forged documents and might pose a threat to security, or it can be sold to firms who wish to target potential customers, The Times Of India reported.

Source: b'IRCTC\xc2\xa0| Source: Wikipedia'

The Maharashtra government has been able to identify those selling the details, and have informed IRCTC and Indian Railways about the development, India Today reported.

Meanwhile, rubbishing reports of a hack, IRCTC PRO Sandip Dutta told The Indian Express,

“There has been no hacking attempt on the site. A high-level committee has been formed to probe the matter. We have requested the cyber cell to give us details of the so-called data theft.”

The matter is being investigated and the Railway Board has said that it will take the required action.  

Feature image source: PTI