WestJet has reported a cyberattack in June where some passengers’ personal information was compromised. The airline reassured that the breach did not expose “sensitive” data in most instances. The incident, which occurred on June 13, was attributed to a sophisticated criminal third party.
Although customers’ credit card and debit card details were safeguarded due to internal security measures, certain personal information like names, contact information, reservation-related data, and details about the passengers’ association with WestJet were exposed. WestJet confirmed that no user passwords were stolen.
Following the breach, WestJet has completed containment measures and implemented additional system and data security protocols. The airline is continuously analyzing the situation and enhancing its cybersecurity measures to prevent future incidents.
Affected customers will be contacted by WestJet for support, and the airline has shared guidance on its website. WestJet has enlisted the services of Cyberscout to provide affected customers with fraud assistance and remediation support. Moreover, WestJet is collaborating with law enforcement agencies, including the U.S. Federal Bureau of Investigation and the Canadian Centre for Cyber Security.
WestJet has informed relevant authorities such as U.S. credit reporting agencies TransUnion, Experian, and Equifax, attorneys general from various U.S. states, Transport Canada, the Office of the Privacy Commissioner of Canada, and other relevant provincial and international entities about the cyberattack.