Overview
- On August 5, Privacy Commissioner Philippe Dufresne’s office launched a formal investigation into WestJet’s handling of the June cybersecurity incident.
- Investigators will review both the strength of the airline’s digital defenses at the time of the breach and the promptness and clarity of its notifications to customers.
- WestJet confirmed that a sophisticated criminal actor accessed personal and travel-related information but did not obtain credit card details or guest passwords.
- The airline restored affected systems within 24 hours and emphasized that its flight operations remained completely safe and uninterrupted.
- WestJet is collaborating with law enforcement, Transport Canada and federal cybersecurity agencies while contacting those whose data may have been exposed.