WestJet Confirms Data Breach Exposing Customer Personal Information

WestJet Airlines has confirmed a cybersecurity incident that exposed certain personal information of its customers.

The breach occurred in mid-June and was discovered on June 13, 2025. The airline assures that no financial account data or passwords were compromised.

On June 13, WestJet's security team detected unusual activity in the airline’s internal systems. An investigation was immediately launched with assistance from both internal and external cybersecurity experts.

The investigation revealed unauthorized access by a third party. WestJet quickly secured its systems, isolating affected servers and implementing additional security measures. A forensic analysis was conducted to identify the accessed customer data.

By September 15, the review of the stolen data was completed, and affected customers, especially in the United States, were notified.

The breach impacted customers in various ways, possibly exposing the following information:

Full name and date of birth Mailing address Travel document details (e.g., passport number) Travel-related preferences and requests Complaints filed with WestJet

Financial details, such as credit or debit card numbers and passwords, were not compromised. WestJet's operations and flight safety were unaffected.

WestJet Rewards members might have had their Rewards ID number and points total exposed. Rewards passwords remain secure, and there is no indication of points misuse.

Customers with WestJet RBC Mastercards may have had credit card identifiers and changes to their points balance exposed. Full card numbers and payment credentials were not affected.

WestJet has implemented several measures to enhance customer protection:

Providing free credit monitoring and identity theft protection services Offering guidance on identifying and reporting suspicious activity Enhancing network security with additional monitoring and encryption Conducting ongoing audits to prevent unauthorized access

Customers notified by WestJet will receive instructions for enrolling in complimentary monitoring services.

Although financial data was not compromised, WestJet advises customers to:

Regularly review credit and bank statements for unusual charges Check loyalty account activity for unexpected point deductions Change passwords on other accounts using the same login details

WestJet remains committed to protecting passenger information and ensuring system security.

Based on reporting by GBHackers.