Privacy Unpacked

Confirmed breach

RailYatri data breach

INIndia · railyatri.in

A breach of RailYatri (India) was added to Have I Been Pwned’s breach database on 5 December 2023. It affected 23,209,732 accounts. Exposed: Email addresses, Phone numbers, Names, Genders and Purchases. The breach began on 26 December 2022, 344 days before it was reported.

If RailYatri had your data

  1. Look for RailYatri’s own notice or letter: it should say what of yours was involved. Keep it.
  2. Expect scams that use your details: calls, texts or emails pretending to be RailYatri, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

More breaches in India

  1. CoinDCXINIndia · 27 October 2026 –not reported
  2. Central Board of Film Certification (CBFC)reportedINIndia · 25 October 2026 Confidential documentsUnreleased scriptsCertification records+7 –not reported
  3. SBIreportedINIndia · 20 October 2026 Email addressesPhone numbersDates of birth+16 3.9Kcustomer records
  4. Angel OneINIndia · 7 October 2026 Government ID numbersFinancial account and card detailsEmail addresses+4 6.8Maccounts
  5. LBBINIndia · 5 March 2023 Email addressesNamesAddresses+2 39.3Kaccounts

Every breach in India →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.