IndiGo's Response After Techie 'Hacks' Website To Find Lost Luggage

Nandan Kumar says he exploited a "technical vulnerability" in IndiGo's system to find another passenger's contact details

An IndiGo passenger has gone viral for exploiting a "technical vulnerability" in the airline's system to find his lost luggage. Nandan Kumar, whose Twitter bio describes him as a software engineer, has shared how he used his technical knowledge to find his luggage after it got exchanged with another passenger. Mr Kumar said that he managed to find his co-passenger's details on IndiGo's website to connect with him and got his luggage back. Soo I traveled from PAT - BLR from indigo 6E-185 yesterday. And my bag got exchanged with another passenger.Honest mistake from both our end. As the bags exactly same with some minor differences. 2/n After the call did not work, the agent assured me that they will call me back when they are able to reach the other person. (I am still waiting for that call ) ???????? 6/n pic.twitter.com/uy7tkqWUO7 So, today morning I started digging into the indigo website trying the co passenger's PNR which was written on the bag tag in hope to get the address or number by trying different methods like check-in, edit booking, update contact, But no luck whatsoever.8/n And there in one of the network responses was the phone number and email I'd of my co-passenger.Ah this was my low-key hacker moment ???????? and the ray of hope.I made note of the details and decided to call the person and try to get the bags swapped. #dev#dataleak#bugpic.twitter.com/9l4pmNDk6V Dear,@IndiGo6E take note1. Fix your IVR and make it more user friendly2. Make your customer service more proactive than reactive3. Your website leaks sensitive data get it fixed. pic.twitter.com/GnnGKypGGJ

After his Twitter thread went viral, the airline responded saying that it remains "fully committed" to data privacy and Mr Kumar did not compromise their website at any point.

On Sunday, Mr Kumar travelled from Patna to Bengaluru in an IndiGo flight. At the Bengaluru airport, however, his bag got exchanged with another passenger. "Honest mistake from both our end. As the bags exactly same with some minor differences," he wrote in his viral Twitter thread.