I contacted Tralliance (who oversee the dot travel registry) and they are now "investigating" this, but I am not satisfied from their response that they regard this seriously enough. It was a major thing for travel companies to go through the authentication process with an accredited organization, and now it seems that some unscrupulous people have found a loophole in the system and obtained highly valuable URL's which were denied to legitimate travel companies during the authentication period.
Is this the start of the rot of the dot travel TLD's?
[edgar.sec.gov...]