WestJet Confirms Data Breach Exposing Customer Personal Information

WestJet Airlines has confirmed that a recent cybersecurity incident exposed certain personal information belonging to its customers, according to gbhackers. The breach took place in mid-June and was discovered on 13 June 2025, with WestJet stating that the situation is now resolved and that no financial account data or passwords were compromised.

The data affected varied, including full name and date of birth, mailing address, travel document details such as passport numbers, travel-related preferences, and complaints filed with WestJet, while sensitive financial details were not taken. The company noted that the impact may have extended to WestJet Rewards members, potentially exposing a Rewards ID number and points total, though Rewards passwords remained secure and there was no indication that points were stolen.

WestJet said it has provided free credit monitoring and identity theft protection, offered guidance to spot suspicious activity, enhanced network security, and conducted ongoing audits to prevent further unauthorised access, with notifications to affected individuals issued after the review was completed.