WestJet Data Breach Exposes Passenger Details, Passport Info

Photo : WestJet

WestJet, one of Canada’s largest airlines, has confirmed that a major cyberattack earlier this year led to the theft of some passengers’ personal information. While the airline says no credit card, debit card, or account password details were taken, other highly sensitive information was compromised — including details from travel documents such as passports.

What Happened

The airline said it noticed unusual activity on its computer systems on June 13, 2024. After investigating, they found that cybercriminals had temporarily gained access to certain parts of WestJet’s network. During this time, they stole personal information belonging to some passengers.

According to WestJet, the stolen information is different for each person. In many cases, it may include:

• Full name
• Date of birth
• Email address
• Home or mailing address
• Phone number
• Gender
• Details of recent travel bookings, including booking numbers

In some cases, the stolen data also included travel document details such as passport numbers or other government-issued identification used for flying.

Why This Matters

Even without credit card numbers or bank details, this type of information can still be dangerous in the wrong hands. Cybersecurity experts explain that criminals can use personal information to:

• Steal a person’s identity

• Open fake bank accounts

• Apply for loans or credit cards

• Create fake passports or IDs

• Commit fraud in the victim’s name

WestJet has warned passengers that their stolen data could be used for identity theft and fraud.

How WestJet is Responding

The airline says it is working closely with law enforcement and cybersecurity experts to investigate the attack. It has also informed the Office of the Privacy Commissioner of Canada, which has officially opened an investigation to find out how the breach happened and what can be done to prevent such incidents in the future.

To help protect affected customers, WestJet is offering:

• Free identity theft protection

• Credit monitoring services for 24 months

This means passengers will be alerted if anyone tries to use their personal details for suspicious activity.

Growing Concerns About Airline Cybersecurity

Airlines hold massive amounts of personal data — from passport information to contact details — because it’s required for international travel. This makes them a prime target for hackers.

In recent years, several major airlines around the world have faced cyberattacks. Each incident raises the same question: Are companies doing enough to protect passenger information?

Experts say companies must invest in stronger encryption, better security monitoring, and regular system checks to stop hackers before they cause damage.

What Passengers Can Do

While customers cannot control how airlines store their data, they can take steps to protect themselves:

1. Check your credit report regularly for unusual activity.

2. Be cautious with suspicious emails — hackers may use stolen information to send fake messages.

3. Use strong passwords and avoid using the same password for different accounts.

4. Report any suspected identity theft to authorities immediately.

WestJet’s Statement to Customers

WestJet has apologized for the incident and said protecting passenger privacy is a top priority. The airline has promised to strengthen its computer systems and work to rebuild customer trust.

For many passengers, however, the breach is a worrying reminder that even trusted companies can be targeted by cybercriminals. In today’s connected world, personal information can be as valuable to criminals as money — and once it’s stolen, it’s almost impossible to get back.