WestJet has disclosed that a cyberattack in June compromised some passengers’ personal data, but the airline reassures the public that most of the exposed information did not include sensitive details. The incident, which occurred on June 13 and was orchestrated by a sophisticated criminal entity, prompted WestJet to issue a notification to U.S. residents as part of its ongoing investigation.
Despite the breach, WestJet’s internal security measures successfully thwarted the cybercriminals from accessing customers’ credit card details, including numbers, expiration dates, and CVV codes, as well as preventing any theft of user passwords. Nevertheless, certain individuals had their personal data exposed, encompassing their names, contact information, reservation-related details, travel documents, and data linked to their interactions with WestJet.
WestJet confirmed that containment measures have been fully executed, and additional enhancements to system and data security have been put in place. The airline emphasized its commitment to bolstering cybersecurity protocols continuously. Affected customers will be contacted for support, and WestJet has enlisted the services of Cyberscout to provide fraud assistance and remediation to those impacted by the breach.
In collaboration with law enforcement agencies such as the U.S. Federal Bureau of Investigation and the Canadian Centre for Cyber Security, WestJet is actively cooperating in the investigation. The airline has also informed relevant authorities, including U.S. credit reporting agencies like TransUnion, Experian, and Equifax, as well as various U.S. state attorneys general, Transport Canada, and privacy regulatory bodies at the provincial and international levels.