WestJet Airlines, a Calgary-based carrier, has disclosed that hackers successfully accessed and extracted certain data from its systems during a cybersecurity breach that occurred over a month ago. The airline first alerted its customers to the incident on June 13, 2023, revealing that a “sophisticated, criminal third party” had gained unauthorized access to some of its servers and software systems.

At that initial point of contact, WestJet emphasized that the safety and integrity of their airline operations were not compromised. However, they did not provide specific details regarding the type of information at risk during the breach. This lack of clarity left many customers concerned about the implications of the incident and the potential vulnerability of their personal data.

In a more recent update issued on a Friday, WestJet clarified that the breach did not involve the extraction of credit or debit card information, nor were any guest user passwords compromised. Despite this reassuring news, the airline acknowledged that “some personal and travel-related data,” the specifics of which can vary among individuals, was indeed stolen during the incident.

In accordance with regulatory requirements, WestJet announced that they have identified the individuals who will be contacted in the coming days to provide additional information and support related to the breach. This proactive outreach illustrates WestJet's commitment to handling the situation transparently and responsibly, aiming to keep affected customers informed.

Moreover, WestJet has stated that they have successfully contained the incident and have implemented further security measures to protect their systems and data. They are committed to ongoing monitoring of their cybersecurity landscape and have pledged to adopt additional steps to enhance their cybersecurity protocols.

The incident highlights the ongoing challenges faced by companies in safeguarding customer data against increasingly sophisticated cyber threats. As organizations like WestJet bolster their security strategies, the importance of customer awareness and vigilance in protecting personal information remains paramount.