Cyber attack led to IGI shutdown

The check-in counters,transfers counters and boarding gates at the IGI are operated using the Common Use Passengers Processing System (CUPPS),maintained by Aeronautical Radio Incorporated (ARINC). The CUPPS operates on a common software-and-hardware platform that integrates all information such as an airline’s reservation system,the expected time of departure and the capacity at waiting lounges. The problem in CUPPS started at 2.30 am on June 29 due to which check-in counters of all airlines at T3 became non-operational.

“This forced the airlines to opt for manual check-in and as a result passengers had to wait. There are around 172 CUPPS counters and only a third were functioning online,” said an official. The investigation revealed that someone had hacked into the main server of the CUPPS and introduced a virus.

It took nearly 12 hours for the experts — from ARINC,Wipro and DIAL — to restore the system. The CBI was also called in as officials suspected it was a security breach. “We found that there were serious security lapses,” said a CBI official.

The agency had also asked for details of records of CUPPS and staff handling the system. “Once we receive the details,it will be analysed to see if any official is involved. It appears that someone sitting at a remote location had operated the system. We have registered a case under the IT Act and other relevant section of the IPC,” added the CBI official.

Said Guru Prasad Rao,country-head of ARINC: “We have lodged a complaint with relevant authorities and are cooperating with all the stake-holders including DIAL. The investigation into the matter is still pending.” The US-based firm was given the contract to set up CUPPS at T3 in 2009.