Statement on Indian Railways E-Ticketing Portal Hacking

Statement on The Hacking of Indian Railways Website

Vivek Chudgar, Senior Director, Mndiant Asia Pacific

Indian Railways e-ticketing portal has been hacked and personal data of around 1 crore customers is feared to have been stolen from the IRCTC website. Such attacks are quite harmful as the personal data of consumers is put to risk.

With this context enclosed below is a statement by Mr. Vivek Chudgar, Senior Director for Mandiant for Asia Pacific.

“When a massive data breach like this is alleged, the first thing organizations must do is carry out a proper forensic investigation to validate the claim. Once a breach is confirmed, it’s important to to quickly investigate exactly what was stolen, the impact to the business and its customers, how the attacker gained access, and if the incident is contained. The skills required for this are beyond what most organizations have in-house. When Mandiant undertakes investigations like this, we use advanced forensic techniques to reconstruct every step the attackers took. While oftentimes the first inclination is to blame insiders, Mandiant often finds that outside attackers are solely responsible.”

- Vivek Chudgar, Senior Director, Mandiant for Asia Pacific