WestJet Notifies U.S Travellers of Cyber Breach

WestJet is notifying American travellers of a cybersecurity breach that might affect certain individuals’ personal information.

The breach dates back to June 13, 2025 when WestJet identified suspicious activity on its systems. In a press release, WestJet says it “immediately began its investigation and determined that these were the actions of a sophisticated, criminal third party, who gained unauthorized access to WestJet’s systems.

Given the significant importance of data security to the integrity of its business, WestJet was prepared for incidents of this nature and followed its response planning by taking immediate action to contain the incident and secure its systems. As a result, at no point was the safety and integrity of WestJet’s airline operations in question.”

The airline engaged external and internal experts to investigate and after confirming some data was obtained, conducted an extensive analysis to identify exactly what was breached. WestJet has since confirmed that due to their internal precautionary systems, no credit card or debit card numbers, expiry dates and CVV numbers, and no guest user passwords were obtained.

The airline says the personal information involved in the incident varies from person to person. For most individuals, the type of personal information involved was not sensitive.

Given the criminal nature of this incident, WestJet closely cooperated with law enforcement, including the US Federal Bureau of Investigation and the Canadian Centre for Cyber Security, and has notified the relevant authorities, including the US credit reporting agencies (TransUnion, Experian, and Equifax), the applicable Attorneys General of the US States with impacted residents, Transport Canada, the Office of the Privacy Commissioner of Canada and its provincial and international counterparts as appropriate.

The airline says the analysis is ongoing, and WestJet will continue to take measures to further enhance its cybersecurity protocols.

Travellers who think they might have been affected can reach out to WestJet at 1-888-937-8538 or wjresponseteam@westjet.com.