Greetings from Travel Distribution News!

Last week's stories kept circling one idea: the big structural bet stalled, the narrow deal kept working. Kenya Airways and South African Airways spent four years trying to build a Pan-African airline. It collapsed. The bilateral codeshares around it, RwandAir-EgyptAir, Air Europa-CemAir, never depended on that alliance and kept moving anyway. AFRAA's Abderahmane Berthé made a similar case on NDC: the 90 percent non-adoption figure is a capacity problem, not a lack of ambition. OnePipe's Ope Adeoye said the same about Nigerian payments, the 8x shift to bank transfer wasn't new behaviour, it was friction finally removed.

The exception: a hotel booking breach involving Claude and an automated pentesting tool, a reminder that AI agents touching booking systems raise a new security question entirely.

Also from last week: what NDC, GDS, EDIFACT and MCP each actually do, and how TPConnects and Ink Innovation want to extend IATA's One Order into airport operations.

All worth reading below.

The Alliance That Was Supposed to Connect Africa’s Skies Didn’t Survive. The Smaller Deals Never Stopped.

Africa's regional and national airlines operate roughly 19 percent of flights within their own continent, while holding close to 18 percent of the world's population. The gap comes down to who controls the booking systems and fare filing, not just whose metal is in the sky.

NEWS BRIEFS

AI Agents Enter the Travel Attack Surface: What the Hotel Booking Breach Means for Distribution

A hacker used Claude alongside an automated pentesting tool to breach four hotel booking platforms, exposing 2.1 million records, by framing the attack as a legitimate security audit. As AI agents gain access to booking systems, the real risk isn't the technology itself, it's whether it can tell a legitimate request from one wearing a legitimate request's clothes.

AFRAA’s Abderahmane Berthé: “The NDC Standard Does Not Adequately Serve the Majority of African Airlines”

More than 90 percent of AFRAA member airlines have no NDC capability. Berthé's case: that figure reflects under-resourced aviation ecosystems, not a lack of strategic will, and the standard itself was built for carriers with IT departments most African airlines don't have.

OnePipe's Ope Adeoye: How Account-to-Account Payments Captured 65% of Nigeria's Airline Market

One airline saw customers choose bank transfer over card at eight times the previous rate within three hours of activating OnePipe's infrastructure. Adeoye's read: that wasn't changing consumer behaviour, it was removing the friction that had been blocking it all along.

TPConnects and Ink Innovation Aim to Bring IATA One Order Into Airport Operations

The partnership combines TPConnects' NDC orchestration with Ink Innovation's airport operations technology, aiming to connect booking, baggage and disruption management under a single order record, extending One Order past retailing for the first time.

Air Europa Expands Southern Africa Reach Without Adding a Single Route

Air Europa's new interline agreement with CemAir lets passengers arriving in Johannesburg book onward travel across CemAir's domestic network on a single ticket, extending reach into secondary African markets without the cost of building one.

NDC Is Not a GDS Replacement. MCP Is Not NDC. Here's What Each Actually Does

NDC, GDS, EDIFACT and MCP get used almost interchangeably in distribution conversations, and they shouldn't be. A clear breakdown of what each one actually does, and where the confusion starts costing real budget and sequencing decisions.

UNTIL NEXT WEEK

That is it for this issue. If this was useful, forward it to a colleague in travel distribution, travel technology, or payments. If you have a tip, a data point, or want to be featured in TDN, reply directly to this email.

Wishing you a fruitful week ahead!

Gustave Sugira
Founder and Editor-in-Chief
Travel Distribution News
Kigali, Rwanda

Keep reading