The embarrassing IT security weak spot in the Swisscard system, which has since been fixed, was reported to the Rundschau programmeExternal link on Swiss public television, SRF, on Monday.
The information included the names of the travellers, their date of birth, the number of first- and second-class tickets purchased and the place of departure and destination.
The hacker told Rundschau that the recent attack required no specialist IT knowledge: “The sensitive data was practically public on the internet.”
The data was never made public and has been returned to Swiss Railways. The hacker said they had no criminal intent but merely wanted to expose the problem.
The Federal Data Protection Commissioner was informed of the security breach.
‘Potential for abuse’
“This is a huge meltdown for Swiss Railways,” Otto Hostettler, a journalist and author specialising in internet crime, told Rundschau. “Such data can be sold in hacker forums on the dark web. In the wrong hands it would have great potential for abuse.”
This has been demonstrated by hacks into Swiss municipal databases in recent months, including the towns of Montreux and Rolle in western Switzerland.
This content was published on
Nemo brought the Eurovision Song Contest to Switzerland with a victory on Saturday evening in Malmö, Sweden. It is Switzerland's third victory in the history of the music contest.
Switzerland abstains from vote on Palestinian bid for full UN membership
This content was published on
On Friday, Switzerland abstained from the vote at the General Assembly on granting the Palestinians new rights at the United Nations (UN).
Protein in abdominal fat could help shape obesity treatment
This content was published on
The study analysed fat cells from different locations in the body, and found that those in the abdomen have unique properties.
North African asylum claims fall after rapid Swiss processing
This content was published on
The accelerated procedure, now out of its test phase, has resulted in a significant drop in applications from North African countries.
This content was published on
The artist's song "The Code" focuses on their journey as a nonbinary individual. It is one of the favourites to win this year's contest.
If you want to start a conversation about a topic raised in this article or want to report factual errors, email us at english@swissinfo.ch.
Read more
More
Hackers target the Swiss town of Montreux
This content was published on
Hackers have carried out a cyber attack against databases belonging to the Montreux authorities in southwestern Switzerland.
Successful hacking group targets Swiss towns, companies, hospitals
This content was published on
A group that hacked a Swiss town and posted datan on the Darknet has threatened to target other municipalities, companies or hospitals.
You can find an overview of ongoing debates with our journalists here . Please join us!
If you want to start a conversation about a topic raised in this article or want to report factual errors, email us at english@swissinfo.ch.