Finance

Canada's WestJet says some passenger data exposed in cybersecurity breach

Published by Global Banking & Finance Review

Posted on September 29, 2025

2 min read

· Last updated: January 21, 2026

Add as preferred source on Google
Canada's WestJet says some passenger data exposed in cybersecurity breach
Global Banking & Finance Awards 2026 — Call for Entries

(Reuters) -Canadian carrier WestJet said on Monday the personal information of some passengers was exposed in a cybersecurity breach earlier this year, though no payment data was compromised. The

WestJet Reports Cybersecurity Breach Exposing Passenger Data

Overview of the Cybersecurity Incident

(Reuters) -Canadian carrier WestJet said on Monday the personal information of some passengers was exposed in a cybersecurity breach earlier this year, though no payment data was compromised.

Details of the Data Exposed

The airline said it detected suspicious activity on June 13 and later determined that a "sophisticated, criminal third party" had gained unauthorized access to its systems.

Response and Mitigation Efforts

The aviation industry's growing dependence on complex digital systems and vast stores of passenger data has made it an increasingly attractive target for cybercriminals.

Earlier this month, a ransomware attack on Collins Aerospace, a unit of RTX, disrupted operations across major European airports, crippling check-in and baggage systems at popular hubs such as London's Heathrow and Berlin.

WestJet said the type of data exposed in the breach varied but could include names, contact details, travel information and documents tied to reservations.

However, no credit card and debit card numbers, expiration dates and CVV numbers were obtained during the breach.

In a notice to U.S. residents on Monday, the carrier said it had worked closely with law enforcement agencies, including the Federal Bureau of Investigation and the Canadian Centre for Cyber Security.

It also notified relevant authorities, including the attorneys general of U.S. states where residents were affected.

(Reporting by Shivansh Tiwary in Bengaluru; Editing by Krishna Chandra Eluri)

Key Takeaways

  • WestJet experienced a cybersecurity breach exposing passenger data.
  • No payment information was compromised in the breach.
  • The breach was detected on June 13, involving a criminal third party.
  • WestJet collaborated with law enforcement for investigation.
  • The breach highlights aviation industry's vulnerability to cyber attacks.

Frequently Asked Questions

What is cybersecurity?
Cybersecurity refers to the practice of protecting systems, networks, and programs from digital attacks, which aim to access, change, or destroy sensitive information.
What is a data breach?
A data breach is an incident where unauthorized individuals gain access to confidential data, potentially leading to data theft or exposure of sensitive information.
What is ransomware?
Ransomware is a type of malicious software that encrypts a victim's files, demanding payment for the decryption key to restore access.
What is passenger data?
Passenger data includes personal information about travelers, such as names, contact details, travel itineraries, and reservation documents.

Tags

Related Articles

More from Finance

Explore more articles in the Finance category