WestJet data breach
Was I affected?
WestJet confirmed a breach affecting about 1.2 million people, exposing names, dates of birth, addresses and email addresses. You may be affected if you booked with or flew WestJet before mid-2025 and received WestJet's breach notice in late September or October 2025.
| Announced | Jun 13, 2025 |
|---|---|
| When it happened | June 2025 (investigation concluded September 15, 2025) |
| People affected | 1.2 million |
| Data exposed | Names, Dates of birth, Addresses, Email addresses, Phone numbers, Passport numbers and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
Canadian airline WestJet disclosed a cyberattack in June 2025 that disrupted its app and internal systems. After its investigation it told regulators that about 1.2 million customers were affected, with names, birth dates, addresses, booking and WestJet Rewards details and, for some, passport or other travel-document information. Media reports linked the attack to Scattered Spider; WestJet offered 24 months of identity monitoring.
What should I do?
- Enroll in the 24 months of identity monitoring WestJet offered.
- Ask Equifax Canada and TransUnion Canada to place a fraud alert or credit freeze on your file and review your credit report.
- If your passport details were exposed and you see misuse, contact Passport Canada (or your passport issuer) about replacing it.
- Treat emails, texts and calls that mention WestJet, flight credits or Rewards points as suspect; don't click links or share codes, and contact the company through its official app or website.
Check the other services you use →
Sources
- WestJet confirms recent breach exposed customers' passports · BleepingComputer (news)
- WestJet data breach exposes travel details of 1.2 million customers · BleepingComputer (news)