Overview
- WestJet detected unauthorized access on June 13 by a sophisticated criminal actor and reports it has implemented additional security measures after containing the incident.
- Exposed data can include names, contact details, travel information and related documents, while no credit or debit card numbers, expiration dates, CVV codes or user passwords were taken.
- The carrier is working with the FBI and the Canadian Centre for Cyber Security and has notified U.S. state attorneys general along with TransUnion, Experian and Equifax.
- Affected customers are being contacted directly, with fraud assistance and remediation services provided through Cyberscout and guidance posted on WestJet’s website.
- The disclosure arrives as aviation faces rising cyber threats, highlighted by a recent ransomware attack on Collins Aerospace that disrupted operations at major European airports.