Content |
History
2025
Hacker hacking of the company's customer base
At the end of September 2025, Canada's second largest airline, WestJet, reported that attackers who attacked its IT infrastructures stole the personal information of about 1.2 million passengers. At the disposal of cybercriminals, in particular, were passport details, contact information, etc.
The cyber incident in question occurred in June 2025. Then it was reported that the hacker invasion provoked failures in the operation of internal information systems and the WestJet application. The air carrier immediately took measures to localize the incident and protect the IT infrastructure, but it was not possible to prevent the leakage of confidential data.
It is noted that information about their accounts (except passwords), points, etc. was stolen from the participants of the company's bonus programs. WestJet warns the stolen information could be used in organising various fraudulent schemes, including those aimed at stealing money. At the same time, the airline emphasizes that the attackers failed to gain access to customer credit or debit card numbers, CVV codes and validity dates.
| We have engaged internal and external experts to conduct a technical and forensic investigation. We are working hard to keep our work safe and protect sensitive data and personal information for both passengers and employees, and we apologize to all customers for any disruption to access to WestJet services, the carrier said in a statement. |
Specialists, the FBI Canadian Center cyber security and other structures are involved in the investigation of the attack. The analysis showed that during the break-in, the criminals used sophisticated tactics. In connection with the incident, WestJet is strengthening cybersecurity protocols.[1]
Cyberattack that disrupted the airline
In mid-June 2025, Canada's second largest airline, WestJet, reported a hacker attack on its IT infrastructure. As a result of cyber intrusion, the operation of the internal systems and mobile application of the air carrier was disrupted.
The official notification says that due to the attack, some users lost access to the airline's services. WestJet activated internal safety protocols and also notified law enforcement and Transport Canada of the incident. Experts are investigating what happened and minimizing possible consequences.
| We make every effort to ensure the safety and security of sensitive data and personal information of both customers and employees. We apologise for any disruption to access to WestJet services. Protecting important data is of paramount importance to us, the notice says. |
A WestJet spokesperson told NBC News that the company first detected signs of a breach on June 13, 2025, immediately after which it took the necessary security measures. As of the end of that month, the carrier had made "significant progress" in addressing the issue. Whether any confidential information was stolen as a result of the invasion is not specified. It is also not clear whether WestJet's malfunctions are related to the introduction of ransomware or other type of malware. Company spokesman Josh Yeats said the investigation into the incident is ongoing in conjunction with law enforcement. The WestJet website also says that "third-party world-class experts" on cybersecurity and forensic experts are involved in establishing the causes of the incident.[2]

