Cyber Incident Victim: WestJet
Date:
Jun 2025
Location:
Canada
Summary
WestJet reported a cybersecurity incident that affected access to some of its internal systems, servers and the mobile app, leading to intermittent interruptions for guests using the app and website. The airline said operations remained safe and unaffected, and that it had activated internal teams, engaged third‑party experts, and was cooperating with law enforcement and Transport Canada while investigating the scope and safeguarding data. It advised guests and employees to exercise caution when sharing personal information and committed to providing updates as more details become available.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 3 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
WestJet detected a cybersecurity incident on June 13, 2025, involving internal systems and the WestJet app, which restricted access for several users. Specialized internal teams were activated in cooperation with law enforcement and Transport Canada to investigate and limit impacts. The airline emphasized that operations remained safe and unaffected, while expediting efforts to safeguard sensitive data and personal information for guests and employees. Guests and employees were advised to exercise additional caution when sharing personal information.
On June 14, WestJet continued responding to the incident affecting access to some services and software systems, with operations running safely and remaining unaffected. The team worked to understand the extent of impact and expedited resolution efforts, apologizing for any interruptions experienced. Regular updates were committed to maintaining transparency, with the advisory page updated every 12 hours or sooner as new information became available.
By June 15, WestJet reported significant progress in safeguarding the digital environment and supporting specialized teams resolving the incident. Investigations were ongoing to assess any potential data in scope, with some guests potentially encountering intermittent interruptions or errors while using the WestJet app or website, which were being actively resolved. Operations remained safe and stable, and WestJet continued cooperating with law enforcement and regulatory bodies while prioritizing minimal disruption to guests and employees. Updates were promised as more details could be shared.