The embarrassing IT security weak spot in the Swisscard system, which has since been fixed, was reported to the Rundschau programmeExternal link on Swiss public television, SRF, on Monday.
The information included the names of the travellers, their date of birth, the number of first- and second-class tickets purchased and the place of departure and destination.
The hacker told Rundschau that the recent attack required no specialist IT knowledge: “The sensitive data was practically public on the internet.”
The data was never made public and has been returned to Swiss Railways. The hacker said they had no criminal intent but merely wanted to expose the problem.
The Federal Data Protection Commissioner was informed of the security breach.
‘Potential for abuse’
“This is a huge meltdown for Swiss Railways,” Otto Hostettler, a journalist and author specialising in internet crime, told Rundschau. “Such data can be sold in hacker forums on the dark web. In the wrong hands it would have great potential for abuse.”
This has been demonstrated by hacks into Swiss municipal databases in recent months, including the towns of Montreux and Rolle in western Switzerland.
Is your place of origin, your Heimatort, important to you?
Every Swiss citizen has a Heimatort, a place of origin, but many have never visited theirs. What’s your relationship with your Heimatort? What does it mean to you?
What factors should be taken into account when inheriting Swiss citizenship abroad?
Should there be a limit to the passing on of Swiss citizenship? Or is the current practice too strict and it should still be possible to register after the age of 25?
Great St. Bernard pass between Switzerland and Italy closed due to avalanche
This content was published on
An avalanche forced the closure of the Great St. Bernard pass between Switzerland and Italy on Thursday. The route remains closed to Easter traffic.
‘Pressure will increase on Switzerland to invest more in defence’
This content was published on
Markus Mäder, Switzerland's state secretary for security policy, believes that more cooperation is needed in order to strengthen defence in Europe.
Just one in five Swiss attend a religious service at Easter
This content was published on
Only one in five people in Switzerland attend a religious service during the Easter period or give up meat or alcohol for at least one day of fasting. Around 25% of those polled see Easter primarily as a family holiday, according to the survey.
Major road disruptions continue after heavy snowfall in parts of Switzerland
This content was published on
The snowfall has ended in the southern Swiss canton of Valais, the cantonal emergency services said on Friday. Several roads, however, remain closed.
Swiss businessman gets prison term for asbestos deaths
This content was published on
Stephan Schmidheiny has been sentenced to 9 years and 6 months in prison by the Turin Court of Appeal in a case against the former Eternit executive over deaths linked to asbestos exposure in Italy.
If you want to start a conversation about a topic raised in this article or want to report factual errors, email us at english@swissinfo.ch.
Read more
More
Hackers target the Swiss town of Montreux
This content was published on
Hackers have carried out a cyber attack against databases belonging to the Montreux authorities in southwestern Switzerland.
Successful hacking group targets Swiss towns, companies, hospitals
This content was published on
A group that hacked a Swiss town and posted datan on the Darknet has threatened to target other municipalities, companies or hospitals.
You can find an overview of ongoing debates with our journalists here . Please join us!
If you want to start a conversation about a topic raised in this article or want to report factual errors, email us at english@swissinfo.ch.