Hacker News Reader

Comment by greyface- | Hacker News Reader

Article says it's on the "dark web", but I was able to find the referenced forum post on the regular Web via Google in 5 seconds: https://breached.vc/Thread-Selling-INDIA-RAILWAYS-30-Million...

Incidentally, it's the same forum as the recent Twitter incident. https://news.ycombinator.com/item?id=34125843

View on HN

Wow I'm shocked how cheap this is:

Prices, to keep this data anti public and affective only 5 copies will be sold

price per copy is 400$ [ negotiable ]

exclusive sale, only 1 person : 1500$

if you want to have the data + vulnerabilities we used to get into the database - 2000$

So either that's a good sum to their standard of living, or the data isn't all that personal and private in the first place.

The transit nerd in me kind of wants to buy it, not for maliciously tracking the customers, but to analyze the commuter and intercity travel patterns of 30m people.

Are there any potential consequences to buying data like this? I'd also be interested in buying/analyzing some of these data sets.

IANAL but, at the very least, you can't be charged with identity theft if you never actually use a stolen identity for anything.

IRCTC does not generally have much pii, except for adressess, phones, email. Aadhar can be linked but that on its own is not useful. Moreover a lot of accounts are burner accounts so the data is likely to be fake.

Does anyone buying an "exclusive" copy actually believe they're getting that?

The pricing is also interesting from another angle, if we take them at their word ("5 copies" vs "exclusive"): why accept 25% less overall? Assuming this is a cryptocurrency transaction, it surprises me the simplicity of dealing with a single buyer is worth that. Can anyone with more insight explain?

Possibly low demand for this because of the country, not a high income country to spam, scams or steal identities.

“Dark web” is used more and more to refer to “sketchy” and not literally “onion-only site”.

Ok, we've changed to that from https://techlomedia.in/2022/12/data-of-30-million-indian-rai.... Thanks!

If @dang (I know @s don't work here) can update the link on the story, that would be great.

He won't see that. It is best to email hn@ycombinator dot com to reach Daniel.

Reply on news.ycombinator.com