5 ms·

Article says it's on the "dark web", but I was able to find the referenced forum post on the regular Web via Google in 5 seconds: https://breached.vc/Thread-Sel

Article says it's on the "dark web", but I was able to find the referenced forum post on the regular Web via Google in 5 seconds: https://breached.vc/Thread-Selling-INDIA-RAILWAYS-30-Million-User-Invoices-2022 https://breached.vc/Thread-Selling-INDIA-RAILWAYS-30-Million... Incidentally, it's the same forum as the recent Twitter incident. https://news.ycombinator.com/item?id=34125843 https://news.ycombinator.com/item?id=34125843

akelly 4y ago
Wow I'm shocked how cheap this is: Prices, to keep this data anti public and affective only 5 copies will be sold price per copy is 400$ [ negotiable ] exclusive sale, only 1 person : 1500$ if you want to have the data + vulnerabilities we used to get into the database - 2000$
- IIAOPSW 4y ago
  So either that's a good sum to their standard of living, or the data isn't all that personal and private in the first place. The transit nerd in me kind of wants to buy it, not for maliciously tracking the customers, but to analyze the commuter and intercity travel patterns of 30m people.
  - reset-password 4y ago
    Are there any potential consequences to buying data like this? I'd also be interested in buying/analyzing some of these data sets.
    - IIAOPSW 4y ago
      IANAL but, at the very least, you can't be charged with identity theft if you never actually use a stolen identity for anything.
    - cuteboy19 4y ago
      IRCTC does not generally have much pii, except for adressess, phones, email. Aadhar can be linked but that on its own is not useful. Moreover a lot of accounts are burner accounts so the data is likely to be fake.
- gregmac 4y ago
  Does anyone buying an "exclusive" copy actually believe they're getting that? The pricing is also interesting from another angle, if we take them at their word ("5 copies" vs "exclusive"): why accept 25% less overall? Assuming this is a cryptocurrency transaction, it surprises me the simplicity of dealing with a single buyer is worth that. Can anyone with more insight explain?
- Rastonbury 4y ago
  Possibly low demand for this because of the country, not a high income country to spam, scams or steal identities.
- deleted 4y ago
  [deleted]
supriyo-biswas 4y ago
If @dang (I know @s don't work here) can update the link on the story, that would be great.
- LinuxBender 4y ago
  He won't see that. It is best to email hn@ycombinator dot com to reach Daniel.
bombcar 4y ago
“Dark web” is used more and more to refer to “sketchy” and not literally “onion-only site”.
dang 4y ago
Ok, we've changed to that from https://techlomedia.in/2022/12/data-of-30-million-indian-railways-users-is-up-for-sale-on-a-dark-forum-96589/ https://techlomedia.in/2022/12/data-of-30-million-indian-rai.... Thanks!

akelly 4y ago

Wow I'm shocked how cheap this is: Prices, to keep this data anti public and affective only 5 copies will be sold price per copy is 400$ [ negotiable ] exclusive sale, only 1 person : 1500$ if you want to have the data + vulnerabilities we used to get into the database - 2000$

IIAOPSW 4y ago
So either that's a good sum to their standard of living, or the data isn't all that personal and private in the first place. The transit nerd in me kind of wants to buy it, not for maliciously tracking the customers, but to analyze the commuter and intercity travel patterns of 30m people.
- reset-password 4y ago
  Are there any potential consequences to buying data like this? I'd also be interested in buying/analyzing some of these data sets.
  - IIAOPSW 4y ago
    IANAL but, at the very least, you can't be charged with identity theft if you never actually use a stolen identity for anything.
  - cuteboy19 4y ago
    IRCTC does not generally have much pii, except for adressess, phones, email. Aadhar can be linked but that on its own is not useful. Moreover a lot of accounts are burner accounts so the data is likely to be fake.
gregmac 4y ago
Does anyone buying an "exclusive" copy actually believe they're getting that? The pricing is also interesting from another angle, if we take them at their word ("5 copies" vs "exclusive"): why accept 25% less overall? Assuming this is a cryptocurrency transaction, it surprises me the simplicity of dealing with a single buyer is worth that. Can anyone with more insight explain?
Rastonbury 4y ago
Possibly low demand for this because of the country, not a high income country to spam, scams or steal identities.
deleted 4y ago
[deleted]

supriyo-biswas 4y ago

If @dang (I know @s don't work here) can update the link on the story, that would be great.

LinuxBender 4y ago
He won't see that. It is best to email hn@ycombinator dot com to reach Daniel.

bombcar 4y ago

“Dark web” is used more and more to refer to “sketchy” and not literally “onion-only site”.

dang 4y ago

Ok, we've changed to that from https://techlomedia.in/2022/12/data-of-30-million-indian-railways-users-is-up-for-sale-on-a-dark-forum-96589/ https://techlomedia.in/2022/12/data-of-30-million-indian-rai.... Thanks!