Canadian Airline WestJet Says Hackers Stole Customer Data

"The incident, disclosed on June 13, involved unauthorized access to several internal systems and impacted the availability of WestJet's application and website. The airline's operations were not affected by the attack, and WestJet restored access to its application and website roughly two days after the incident. In July, WestJet said the incident had been fully contained and additional security measures were implemented, adding that the hackers were able to steal certain data from its systems."

"According to the company, names, contact information, government-issued IDs, and other information provided by customers was stolen, but no credit/debit card details or passwords were obtained. "While it is possible that some of this information could be used for identity theft or fraud (including in the context of any booked travel), WestJet is not aware of any misuse of the relevant data for such purposes," the company said."

A June 13 cyberattack involved unauthorized access to several internal systems and impacted availability of WestJet's application and website. Airline operations were not affected and access was restored roughly two days after the incident. The incident was contained by July and additional security measures were implemented after confirming that hackers stole certain data. Personal information provided by travelers for reservations or travel was compromised, including names, contact information, government-issued IDs and other customer-supplied details. No credit/debit card information or passwords were obtained. WestJet began notifying affected individuals and offering identity theft protection while warning customers to watch for impersonation attempts.

Read at SecurityWeek