Finance
Canada's WestJet says some passenger data exposed in cybersecurity breach
Published by Global Banking and Finance Review
Posted on September 29, 2025
2 min readLast updated: January 21, 2026
Global Banking and Finance Review
Company
Published by Global Banking and Finance Review
Posted on September 29, 2025
2 min readLast updated: January 21, 2026
WestJet reported a cybersecurity breach exposing passenger data but confirmed no payment info was compromised. The breach involved unauthorized system access.
(Reuters) -Canadian carrier WestJet said on Monday the personal information of some passengers was exposed in a cybersecurity breach earlier this year, though no payment data was compromised.
The airline said it detected suspicious activity on June 13 and later determined that a "sophisticated, criminal third party" had gained unauthorized access to its systems.
The aviation industry's growing dependence on complex digital systems and vast stores of passenger data has made it an increasingly attractive target for cybercriminals.
Earlier this month, a ransomware attack on Collins Aerospace, a unit of RTX, disrupted operations across major European airports, crippling check-in and baggage systems at popular hubs such as London's Heathrow and Berlin.
WestJet said the type of data exposed in the breach varied but could include names, contact details, travel information and documents tied to reservations.
However, no credit card and debit card numbers, expiration dates and CVV numbers were obtained during the breach.
In a notice to U.S. residents on Monday, the carrier said it had worked closely with law enforcement agencies, including the Federal Bureau of Investigation and the Canadian Centre for Cyber Security.
It also notified relevant authorities, including the attorneys general of U.S. states where residents were affected.
(Reporting by Shivansh Tiwary in Bengaluru; Editing by Krishna Chandra Eluri)
Cybersecurity refers to the practice of protecting systems, networks, and programs from digital attacks, which aim to access, change, or destroy sensitive information.
A data breach is an incident where unauthorized individuals gain access to confidential data, potentially leading to data theft or exposure of sensitive information.
Ransomware is a type of malicious software that encrypts a victim's files, demanding payment for the decryption key to restore access.
Passenger data includes personal information about travelers, such as names, contact details, travel itineraries, and reservation documents.
Explore more articles in the Finance category
