WestJet Confirms Passenger IDs and Passports Stolen in Cyberattack

WestJet confirms a data breach starting June 13, 2025, stole passport/ID and personal data. Credit cards and passwords are safe. The airline offers 24 months of free identity monitoring, including $1M insurance.

WestJet, a leading Canadian airline based in Calgary, has confirmed that a cybersecurity attack exposed personal information belonging to some of its passengers. The incident began on June 13, 2025, with the airline issuing an initial advisory shortly afterwards.

The airline detected suspicious activity, including restricted access for several users to internal systems and the WestJet app. They immediately activated specialized teams and contacted external security and forensic experts to tackle the breach. WestJet sincerely apologized to guests for any disruption and confirmed in its latest notification (PDF) that the review of all affected data was finalized on September 15, 2025.

What Information Was Stolen?

WestJet stated in its June 2025 advisory that a criminal third party ...