About WestJet
In a recent data breach incident, WestJet, a prominent airline based in Calgary, Alberta, Canada, has reported a significant compromise of its systems. The breach, which occurred on June 13, 2025, impacted approximately 1.2 million individuals, including 240 residents of Maine. The breach involved external system hacking, leading to unauthorized access to sensitive information. This incident highlights the growing risks associated with cybersecurity threats facing commercial entities.
What Happened
On June 13, 2025, we identified suspicious activity on our WestJet systems. We immediately investigated and determined that these were the actions of a sophisticated criminal third party, who gained unauthorized access to our systems. With the assistance of internal and external experts, we took immediate steps to secure our environment and started a technical and forensic investigation to identify the nature and scope of the event. This included identifying any data that may have been affected. The investigations to date have established that the unauthorized third party obtained certain data from our network. Since making that determination, we diligently conducted an extensive analysis of that data to identify specific data elements and locate current contact information for certain United States residents who were impacted. As of September 15, 2025, we completed our analysis and as a result are providing this notice.
The breach involved unauthorized access by a sophisticated criminal third party, impacting over a million individuals. Affected individuals include both WestJet Rewards Members and cardholders of WestJet RBC Mastercards. The breach was identified on June 13, 2025.
Next Steps
Affected users are advised to remain vigilant by reviewing their account statements and credit reports closely for any suspicious activity. WestJet has provided a unique code for individuals to enroll in complimentary identity theft protection services through TransUnion. Users should also consider placing a fraud alert on their credit reports and may want to apply a security freeze to their credit files to prevent unauthorized access. WestJet continues to work with law enforcement and technical experts to address and mitigate the impact of this breach.
Identity Theft Protection Services
WestJet is offering a 24-month subscription to identity theft protection services through TransUnion Cyberscout at no cost to the impacted individuals. These services include alerts for changes to personal information, identity theft protection, and proactive fraud assistance resources. The service also provides up to $1,000,000 in expense reimbursement insurance. Impacted individuals are encouraged to enroll in these services to enhance their protection against potential identity theft and fraudulent activities.