Overview

• WestJet detected suspicious activity on June 13 that allowed unauthorized actors to access systems and steal personal and travel-related information, including passport data.
• It confirmed no credit or debit card numbers or user passwords were taken, reducing some immediate financial exposure for customers.
• The airline is offering affected customers 24 months of free identity-theft monitoring and will notify those impacted directly through its cybersecurity partner.
• Canada’s Office of the Privacy Commissioner and federal cybersecurity and law-enforcement agencies are formally investigating the airline’s technical safeguards and breach response.
• WestJet said flight operations remained safe and uninterrupted throughout the incident and that temporary website and app issues were resolved quickly.