Data breach at Canadian airline WestJet affects 1.2 million customers

On June 13, 2025, Canadian airline WestJet notified its customers of a security breach that had occurred that same day due to an intrusion into its systems. The notification stated that the incident affected WestJet's internal systems and application, but did not disrupt the airline's overall operations or compromise operational safety.

Subsequently, on July 18, the company confirmed that an unidentified third party had gained unauthorized access to customer data as a result of the incident.

Following an investigation into the incident, on September 15, WestJet confirmed that the data breach affected the personal data of 1.2 million people.,Todav the identity of the perpetrator of the attack remains unknown.

The leaked data included names, dates of birth, addresses, travel documents such as passports and other official identification documents, as well as other travel-related information such as accommodation requests or claims filed. WestJet travel rewards cardholders also had their account data leaked, including account identification numbers and point balances.