|
WestJet Provides Notice of Data Incident to United States Residents
Tuesday, October 7, 2025
CALGARY, AB, Sept. 29, 2025 /PRNewswire/ - WestJet, an Alberta Partnership and Canadian commercial airline headquartered in Calgary, Alberta ("WestJet"), is providing notice to United States residents of a recent cybersecurity incident that may affect certain individuals' personal information.
On June 13, 2025, WestJet identified suspicious activity on its systems. WestJet immediately began its investigation and determined that these were the actions of a sophisticated, criminal third party, who gained unauthorized access to WestJet's systems.
Given the significant importance of data security to the integrity of its business, WestJet was prepared for incidents of this nature and followed its response planning by taking immediate action to contain the incident and secure its systems. As a result, at no point was the safety and integrity of WestJet's airline operations in question.
WestJet engaged internal and external experts to perform a technical and forensic investigation to identify the nature and scope of the event. Unfortunately, WestJet confirmed that certain data was obtained from its systems. Since making that determination, WestJet diligently conducted an extensive analysis of that data to identify specific data elements and locate current contact information for certain United States residents who were impacted. As of September 15, 2025, WestJet completed that analysis and as a result is providing this notice. Due to WestJet's internal precautionary measures, no credit card or debit card numbers, expiry dates and CVV numbers, and no guest user passwords were obtained.
The personal information involved in this incident varies from person to person. For most individuals, the type of personal information involved was not sensitive. However, for certain individuals the data may include information such as name, contact details, information and documents provided in connection with their reservation and travel, and data regarding their relationship with WestJet. In line with regulatory requirements, WestJet has identified those individuals who it will contact to provide information and support regarding this incident where WestJet has sufficient contact information. For more information, WestJet has also posted additional information and guidance on its website.
Given the criminal nature of this incident, WestJet closely cooperated with law enforcement, including the US Federal Bureau of Investigation and the Canadian Centre for Cyber Security, and has notified the relevant authorities, including the US credit reporting agencies (TransUnion, Experian, and Equifax), the applicable Attorneys General of the US States with impacted residents, Transport Canada, the Office of the Privacy Commissioner of Canada and its provincial and international counterparts as appropriate.
Containment is complete, and some additional system and data security measures have been implemented. However, analysis is ongoing, and WestJet will continue to take measures to further enhance its cybersecurity protocols.
In addition, WestJet retained the assistance of Cyberscout, a TransUnion company, in providing impacted individuals with fraud assistance and remediation services. If you received an email or letter notice about this incident directly from WestJet, that notice sets out the types of personal information about you that may have been involved in this incident and provides information on how to access identity theft protection services.
If you were not contacted by WestJet directly and would like to know whether your data was involved, please contact WestJet at 1-888-937-8538 or wjresponseteam@westjet.com.
WestJet encourages individuals to remain vigilant against incidents of identity theft and fraud, to review account statements, and monitor free credit reports for suspicious activity. Out of an abundance of caution, if potentially affected individuals would like to take additional measures to protect against identity theft, the Federal Trade Commission provides general advice here: https://consumer.ftc.gov/features/identity-theft.
We sincerely regret this situation, and we remain grateful for the support and patience of the thousands of guests and WestJetters who place their trust in us.
Media Contact: media@westjet.com
View original content:https://www.prnewswire.com/news-releases/westjet-provides-notice-of-data-incident-to-united-states-residents-302569109.html
SOURCE WESTJET, an Alberta Partnership
|
|
|
|
|
 |
The New Identity Theft Crisis: AI Scams, Child Victims, and Credit Damage Are All Spiking | Jan 22, 2026
|
 |
AllSci Launches Hypothesis Publishing: A Seamless Way to Share, Connect, and Advance Scientific Ideas | Jan 22, 2026
|
 |
Canadian Fintech Tuhk Inc., Founded by Ethoca and NuData Security Veterans, Raises US$6 Million Seed Round Led by FINTOP, with Lloyds Banking Group and Capital One Ventures | Jan 22, 2026
|
 |
Darwin CX Caps a Banner Year with AI Launch, Sold-Out Events, and Industry Book Launch | Jan 22, 2026
|
 |
Fintech Startup BON Credit Secures $3.5 Million In Funding | Jan 22, 2026
|
 |
Nudge Security Unveils Industry's Most Comprehensive AI Security Governance Platform | Jan 22, 2026
|
 |
PayDo Launches Unified Payment Infrastructure Suite for Digital Businesses | Jan 22, 2026
|
 |
IoTeX Publishes MiCA-Compliant Whitepaper for IOTX, Enabling EU-Wide Alignment Under the New Regulatory Framework | Jan 22, 2026
|
 |
Paxos Selects Mesh To Enable Trusted Crypto Deposits | Jan 22, 2026
|
 |
Gametime Launches "12 Days of Gametime" Holiday Giveaway in Partnership with Barstool Sports | Jan 22, 2026
|
|
|
|