ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

ABOUT IRCTC Indian Railway Catering and Tourism Corporation Ltd. has been set up by the Ministry of Railways with the basic purpose of hiving off entire catering and tourism activity of the railways to the new Corporation so as to professionalise and upgrade these services with public-private participation. Rail based Tourism in India will be the specific vehicle for achieving high growth in coordination with state agencies, tour operators, travel agents and the hospitality industry. Indian Railways span global volumes in hospitality and catering sectors with services provided to 13 million passengers everyday. Tourism Railway Tourism has seen excellent growth in India.Right from IRCTC's inception , we have undertaken dynamic marketing strategy with major tour operators and State Tourism as our partners for providing exclusive tour packages across the country. IRCTC arranges for full train charters,coaches as well as reserved berth programmes through regular trains for tourism purposes. Internet Rail Reservation There has been a latent demand in the country for ticket availability at the door-step. IRCTC has already developed this facility at Delhi, Chennai,Bangalore,Kolkata and Mumbai. Very soon the facility will spread to Hyderabad,Pune and Ahmedabad. After consolidation at these centres, further development in the major towns will take place. IRCTC web enabled reservation site is www.irctc.co.in Food Plazas IRCTC has firmed up plans to set up over 50 multi-cuisine food plazas at major railway stations throughout the country during the current year. The Food plazas will have contemporary decor , air conditioned ambience and round the clock operation to suit passenger convenience with market driven competitve pricing. Call Center IRCTC has recently inaugurated a Call Center. A customer can dial 139 from anywhere in the country and get all information from Indian Railways.

IRCTC A.I CyberSecurity Scoring

IRCTC

Company Details

Linkedin ID:

irctc

Employees number:

2,033

Number of followers:

28,324

NAICS:

721

Industry Type:

Hospitality

Homepage:

irctc.com

IP Addresses:

0

Company ID:

IRC_2562394

Scan Status:

In-progress

AI scoreIRCTC Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/irctc.jpeg
IRCTC Hospitality
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreIRCTC Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/irctc.jpeg
IRCTC Hospitality
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

IRCTC Company CyberSecurity News & History

Past Incidents
0
Attack Types
0
No data available
Ailogo

IRCTC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for IRCTC

Incidents vs Hospitality Industry Average (This Year)

No incidents recorded for IRCTC in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for IRCTC in 2025.

Incident Types IRCTC vs Hospitality Industry Avg (This Year)

No incidents recorded for IRCTC in 2025.

Incident History — IRCTC (X = Date, Y = Severity)

IRCTC cyber incidents detection timeline including parent company and subsidiaries

IRCTC Company Subsidiaries

SubsidiaryImage

ABOUT IRCTC Indian Railway Catering and Tourism Corporation Ltd. has been set up by the Ministry of Railways with the basic purpose of hiving off entire catering and tourism activity of the railways to the new Corporation so as to professionalise and upgrade these services with public-private participation. Rail based Tourism in India will be the specific vehicle for achieving high growth in coordination with state agencies, tour operators, travel agents and the hospitality industry. Indian Railways span global volumes in hospitality and catering sectors with services provided to 13 million passengers everyday. Tourism Railway Tourism has seen excellent growth in India.Right from IRCTC's inception , we have undertaken dynamic marketing strategy with major tour operators and State Tourism as our partners for providing exclusive tour packages across the country. IRCTC arranges for full train charters,coaches as well as reserved berth programmes through regular trains for tourism purposes. Internet Rail Reservation There has been a latent demand in the country for ticket availability at the door-step. IRCTC has already developed this facility at Delhi, Chennai,Bangalore,Kolkata and Mumbai. Very soon the facility will spread to Hyderabad,Pune and Ahmedabad. After consolidation at these centres, further development in the major towns will take place. IRCTC web enabled reservation site is www.irctc.co.in Food Plazas IRCTC has firmed up plans to set up over 50 multi-cuisine food plazas at major railway stations throughout the country during the current year. The Food plazas will have contemporary decor , air conditioned ambience and round the clock operation to suit passenger convenience with market driven competitve pricing. Call Center IRCTC has recently inaugurated a Call Center. A customer can dial 139 from anywhere in the country and get all information from Indian Railways.

Loading...
similarCompanies

IRCTC Similar Companies

IHG Hotels & Resorts

IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. With a family of 19 hotel brands and IHG One Rewards, one of the world's largest hotel loyalty programmes, IHG has over 6,300 open hotels in more than 100 countries,

Country Club India Ltd is one of the fastest growing entertainment and leisure conglomerate in India. A Multi-Million dollar entity and a listed company on BSE (Bombay Stock Exchange), CCIL is a pioneer in the concept of family clubbing in the country. CCIL has established 205 properties of which 50

Kempinski Hotels

Founded in Germany in 1897, Kempinski Hotels has long reflected the finest traditions of European hospitality. Today, as ever, Kempinski is synonymous with distinctive luxury. Located in many of the world's most well-known cities and resorts, the Kempinski collection includes hotels in a grand mann

DoubleTree by Hilton

DoubleTree by Hilton hotels are distinctively designed properties that provide true comfort to today’s business and leisure travelers. From the millions of delighted hotel guests who are welcomed with the brand’s legendary, warm chocolate chip cookies at check-in to the advantages of the award-winni

Milestone Pacific Hotel Group

Our Vision : Asia’s premier purveyor of designer affordable luxury hotels & design oriented value hotels focusing in the business travel market with particular strength in Indonesia and implementing asset-light strategy. Our Mission : Never to settle for anything less than excellence and will

Rotana Hotels

Since inception, Rotana has grown to be the region’s largest hospitality management company, and a brand that is widely recognized and admired. Rotana currently manages a portfolio of over 100 properties throughout the Middle East, Africa, Eastern Europe and Türkiye offering a wide range of servic

Mandarin Oriental

Mandarin Oriental Hotel Group is the award-winning owner and operator of some of the world’s most luxurious hotels, resorts and residences. Having grown from its Asian roots into a global brand, the Group now operates 43 hotels, 12 residences and 23 exclusive homes in 26 countries and territories, w

Landry's is a multinational, diversified restaurant, hospitality, gaming, and entertainment leader based in Houston, Texas. The company operates more than 600 establishments around the world, including well-known concepts, such as Landry’s Seafood House, Bubba Gump Shrimp Co., Rainforest Cafe, Mo

Accor

We are Accor We are more than 290,000 hospitality experts placing people at the heart of what we do, creating emotion for our guests, and nurturing passion for service and achievement beyond limits. Building on the strength of our teams and of our fully integrated ecosystem of leading brands, perso

newsone

IRCTC CyberSecurity News

October 16, 2025 07:00 AM
Diwali 2025: How users can protect finances while online shopping

As Diwali 2025 approaches, online transactions are expected to surge, increasing exposure to digital fraud. Consumers should follow secure...

September 19, 2025 07:00 AM
2 Stocks to buy now for an upside of up to 28%; Recommended by Trade Brains Portal

Today, we recommend two stocks, one from the railway sector and another from the FMCG sector, as recommended by the Trade Brains Portal,...

September 09, 2025 07:00 AM
RailTel Secures Rs 18.56 Crore Cybersecurity Contract from IRCTC; Adds to Recent Rs 396 Cr Project Win in Bihar

RailTel Secures Rs 18.56 Crore Cybersecurity Contract from IRCTC; Adds to Recent Rs 396 Cr Project Win in Bihar · New Delhi: · Project Scope:...

September 09, 2025 07:00 AM
RailTel Secures Rs. 18.56 Crore Cyber Security Contract from IRCTC

RailTel Secures Rs. 18.56 Crore Cyber Security Contract from IRCTC ... RailTel Corporation of India Ltd. has won a contract worth Rs. 18.56 crore...

September 09, 2025 07:00 AM
RailTel gains after securing Rs 19-cr order from IRCTC

RailTel Corporation of India rose 3.69% to Rs 358.55 after the company bagged an order worth Rs 18.56 crore from Indian Railway Catering and...

August 20, 2025 07:00 AM
India’s cyber fraud surge: Why festivals are prime time for hackers - ET Edge Insights

As the first strains of festive music echo across India and markets light up with decorations, another kind of preparation is quietly...

August 04, 2025 07:00 AM
‘AI Chatbot Ask DISHA Resolves 10 Billion Queries, Books 3,000 Tickets Daily’: Rahul Himalian, Director (Tourism & Marketing), IRCTC

In an exclusive conversation, Rahul Himalian explained how IRCTC is transforming digital travel with AI and blockchain. From the Ask DISHA...

July 29, 2025 07:00 AM
IRCTC Heist: Aadhaar Mandate for Tatkal Locks Out Users; Accounts Go Up For Sale

Users are reporting being booted out of their IRCTC accounts after the Railway Ministry's notification making Aadhaar mandatory for Tatkal...

July 16, 2025 07:00 AM
10 Lakh Citizens to Receive Free AI Training: Priority will be given to Village Level Entrepreneurs (VLEs)

10 Lakh Citizens to Receive Free AI Training: Priority will be given to Village Level Entrepreneurs (VLEs)...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

IRCTC CyberSecurity History Information

Official Website of IRCTC

The official website of IRCTC is http://www.irctc.com.

IRCTC’s AI-Generated Cybersecurity Score

According to Rankiteo, IRCTC’s AI-generated cybersecurity score is 794, reflecting their Fair security posture.

How many security badges does IRCTC’ have ?

According to Rankiteo, IRCTC currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does IRCTC have SOC 2 Type 1 certification ?

According to Rankiteo, IRCTC is not certified under SOC 2 Type 1.

Does IRCTC have SOC 2 Type 2 certification ?

According to Rankiteo, IRCTC does not hold a SOC 2 Type 2 certification.

Does IRCTC comply with GDPR ?

According to Rankiteo, IRCTC is not listed as GDPR compliant.

Does IRCTC have PCI DSS certification ?

According to Rankiteo, IRCTC does not currently maintain PCI DSS compliance.

Does IRCTC comply with HIPAA ?

According to Rankiteo, IRCTC is not compliant with HIPAA regulations.

Does IRCTC have ISO 27001 certification ?

According to Rankiteo,IRCTC is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of IRCTC

IRCTC operates primarily in the Hospitality industry.

Number of Employees at IRCTC

IRCTC employs approximately 2,033 people worldwide.

Subsidiaries Owned by IRCTC

IRCTC presently has no subsidiaries across any sectors.

IRCTC’s LinkedIn Followers

IRCTC’s official LinkedIn profile has approximately 28,324 followers.

IRCTC’s Presence on Crunchbase

No, IRCTC does not have a profile on Crunchbase.

IRCTC’s Presence on LinkedIn

Yes, IRCTC maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/irctc.

Cybersecurity Incidents Involving IRCTC

As of November 27, 2025, Rankiteo reports that IRCTC has not experienced any cybersecurity incidents.

Number of Peer and Competitor Companies

IRCTC has an estimated 13,638 peer or competitor companies worldwide.

IRCTC CyberSecurity History Information

How many cyber incidents has IRCTC faced ?

Total Incidents: According to Rankiteo, IRCTC has faced 0 incidents in the past.

What types of cybersecurity incidents have occurred at IRCTC ?

Incident Types: The types of cybersecurity incidents that have occurred include .

Incident Details

What are the most common types of attacks the company has faced ?

Additional Questions

cve

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=irctc' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge