IRCTC Bug Put Passenger Data Of Millions At Risk For Two Years

After IRCTC was informed it fixed the bug, but no responsible disclosure has been made for months.