31st May 2023, Kathmandu
The hacking incidents that have targeted the Nepali travel industry professionals have raised serious concerns about the security and reliability of the International Air Transport Association (IATA) and Sabre (SABRE), the software and technology service provider for ticketing.
In this particular incident, the hacking was carried out by compromising the software used to print tickets. The hacker used the login credentials of Cosmo Nepal Travels and Tours, a travel company, to issue tickets worth millions of rupees. The hack was discovered when Air Promotion Group (APG), a company providing services to airlines, sent a bill to Cosmo Nepal Travels and Tours for a large number of tickets that were cut via their network.
The hacker used the Global Distributor Center (GDS) company Sabre (SABRE) to issue tickets under the login of Cosmo Nepal Travels and Tours. It seems that the hacker was able to exploit vulnerabilities in both IATA and Sabre’s systems, raising questions about the security and dependability of these systems.
According to the general director of Cosmo Nepal Travels and Tours, Shyam KC, the hacker exceeded the ticketing limit set by IATA by issuing tickets worth 74 lakh rupees using the login credentials of a company with a limit of 2.5 lakh rupees. This indicates that the systems used by Nepal’s tours and travel companies, including Sabre and IATA, are not secure.
This incident is not an isolated one, as there have been similar hacking incidents targeting other travel and tour companies in Nepal in the past. These incidents highlight the urgent need for enhanced security measures and safeguards in the systems used by IATA and Sabre, as well as the overall travel industry in Nepal.
Cosmo Nepal Travels and Tours is in the process of filing a protest with the appropriate organization to address the issue and ensure that such incidents are prevented in the future. The authorities and organizations involved need to take immediate action to investigate the hacking incidents, enhance system security, and restore confidence in the ticketing processes for Nepal’s travel industry.
