India's largest e-commerce website IRCTC may have escaped a hack last week, but the website is a sitting duck for even amateur hackers. So claims Bengaluru-based cybersecurity startup Fallible. The startup provided details on how exactly the data leak can easily happen on IRCTC website. "Contrary to the claims made in media, there is indeed a data leak happening on the IRCTC website. The data includes phone numbers, email addresses, home addresses, date of birth, Aadhar for those users who gave it on IRCTC, password reset question and the secret answer," Fallible co-founder Abhishek Anand told TOI Tech .

The hacking speculations started after Maharashtra Cyber Cell was reportedly informed about a CD containing phone numbers, date of birth and other such information of IRCTC users being sold for Rs 15,000 in the market.

This raised fears about data of lakhs of IRCTC users being compromised.

In the past too, there have been cases in which railway booking agents have used a software to hack into IRCTC's website and booked several e-tickets even before the online windows opened for bookings.