A hacker leaked troves of data allegedly owned by IRIMEE

India’s Indian Railways Institute of Mechanical and Electrical Engineering (IRIMEE) has fallen victim to a significant data breach, ultimately leading to data leaks.

Our iZOOlogic researchers observed that a hacker named ‘Ynnian’ published the Indian company’s database, which has a file size of 241MB, on a hacking forum. The hacker allegedly wants to sell the database by posting it on a black market.

IRIMEE, located in Jamalpur, Bihar, is famous for training and developing the next generation of mechanical and electrical engineers for the Indian Railways. It is one of the oldest institutes in India after first establishing its department in 1888.

 

The hacker who leaked the IRIMEE database could expose relevant individuals affiliated with the institution.

 

According to our researchers, Ynnian leaked the data that reached approximately 908,626 lines that contain details of the IREMEE database. Our analysts also confirmed that the compromised information includes names, email addresses, passwords, and dates of birth, among others.

The data exposure could jeopardise the personal details of students and staff, which could also result in the compromise of proprietary research materials and operational information critical to the institute’s functioning.

The consequences of this breach extend beyond the boundaries of IRIMEE since it could impact the broader Indian Railways network. With intricate details of IREMEE-affiliated individuals now potentially in the hands of malicious actors, serious concerns exist about the impact on the safety and efficiency of students and staff.

The incident could have prompted an urgent response from the Indian Railways authorities, who should closely work with cybersecurity experts to assess the extent of the damage and implement more vigorous measures to prevent future breaches.

The company has yet to confirm or address the alleged data leak. However, this data breach should serve as a wake-up call for IRIMEE and other institutions within the Indian Railways umbrella to reevaluate and fortify their cybersecurity defences.

As one of the critical infrastructures for transportation in the country, the railway system cannot afford vulnerabilities that could impact its operations since they hold passenger safety. Our researchers closely monitor this developing issue and will provide more details once they spot new information.