WestJet Provides Notice of Data Incident to United States Residents

CALGARY, AB, Sept. 29, 2025 /PRNewswire/ - WestJet, an Alberta Partnership and Canadian commercial airline headquartered in Calgary, Alberta ("WestJet"), is providing notice to United States residents of a recent cybersecurity incident that may affect certain individuals' personal information.

On June 13, 2025, WestJet identified suspicious activity on its systems. WestJet immediately began its investigation and determined that these were the actions of a sophisticated, criminal third party, who gained unauthorized access to WestJet's systems.

Given the significant importance of data security to the integrity of its business, WestJet was prepared for incidents of this nature and followed its response planning by taking immediate action to contain the incident and secure its systems. As a result, at no point was the safety and integrity of WestJet's airline operations in question.

WestJet engaged internal and external experts to perform a technical and forensic investigation to identify the nature and scope of the event. Unfortunately, WestJet confirmed that certain data was obtained from its systems. Since making that determination, WestJet diligently conducted an extensive analysis of that data to identify specific data elements and locate current contact information for certain United States residents who were impacted. As of September 15, 2025, WestJet completed that analysis and as a result is providing this notice. Due to WestJet's internal precautionary measures, no credit card or debit card numbers, expiry dates and CVV numbers, and no guest user passwords were obtained.

The personal information involved in this incident varies from person to person. For most individuals, the type of personal information involved was not sensitive. However, for certain individuals the data may include information such as name, contact details, information and documents provided in connection with their reservation and travel, and data regarding their relationship with WestJet. In line with regulatory requirements, WestJet has identified those individuals who it will contact to provide information and support regarding this incident where WestJet has sufficient contact information. For more information, WestJet has also posted additional information and guidance on its website.

Given the criminal nature of this incident, WestJet closely cooperated with law enforcement, including the US Federal Bureau of Investigation and the Canadian Centre for Cyber Security, and has notified the relevant authorities, including the US credit reporting agencies (TransUnion, Experian, and Equifax), the applicable Attorneys General of the US States with impacted residents, Transport Canada, the Office of the Privacy Commissioner of Canada and its provincial and international counterparts as appropriate.

Containment is complete, and some additional system and data security measures have been implemented. However, analysis is ongoing, and WestJet will continue to take measures to further enhance its cybersecurity protocols.

In addition, WestJet retained the assistance of Cyberscout, a TransUnion company, in providing impacted individuals with fraud assistance and remediation services. If you received an email or letter notice about this incident directly from WestJet, that notice sets out the types of personal information about you that may have been involved in this incident and provides information on how to access identity theft protection services.

If you were not contacted by WestJet directly and would like to know whether your data was involved, please contact WestJet at 1-888-937-8538 or [email protected].

WestJet encourages individuals to remain vigilant against incidents of identity theft and fraud, to review account statements, and monitor free credit reports for suspicious activity. Out of an abundance of caution, if potentially affected individuals would like to take additional measures to protect against identity theft, the Federal Trade Commission provides general advice here: https://consumer.ftc.gov/features/identity-theft.

We sincerely regret this situation, and we remain grateful for the support and patience of the thousands of guests and WestJetters who place their trust in us.

Media Contact: [email protected]

SOURCE WESTJET, an Alberta Partnership