Particle.news

Download on the App Store

WestJet Notifies U.S. Passengers After Cyberattack Exposes Personal and Travel Data

The airline is contacting affected U.S. customers following confirmation that some personal and travel‑document data were exposed.

Overview

  • Notices went out on Sept. 29 to U.S. residents identified in a Sept. 15 analysis of data obtained during the June 13 intrusion.
  • Exposed information can include names, contact details, reservation data and travel documents, with specifics varying by individual.
  • WestJet says no credit or debit card numbers, expiration dates, CVV codes or user passwords were taken.
  • The carrier engaged Cyberscout for fraud assistance, posted guidance for customers, and reported the breach to the FBI, the Canadian Centre for Cyber Security, U.S. state attorneys general and major credit bureaus.
  • Containment is complete with additional safeguards in place, forensic analysis and regulatory reviews continue, and flight operations were not disrupted.