WestJet

Disclosed Jun 13, 20251,200,000 affectedConfirmed

WestJet cyberattack exposes 1.2 million passengers' travel documents

WestJet disclosed a security incident in June 2025 and later told Maine's attorney general that 1.2 million passengers had data stolen, including names, birth dates, addresses, passports and other ID documents, and rewards account data.

What is known

People affected	1,200,000 (as reported by the organization)
Disclosed	Jun 13, 2025
Discovered	Jun 13, 2025
Happened	Jun 13, 2025
Attack	Hacking
Data exposed	NamesDates of birthAddressesGovernment IDsOtherHealth
Sector	Transport · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: WestJet

Official noticeatg.wa.gov

Washington Attorney General breach notice: WestJet

Official noticejustice.oregon.gov

Oregon DOJ breach notice: WestJet

Newstechcrunch.com

Data breach at Canadian airline WestJet affects 1.2M passengers

Newsbleepingcomputer.com

WestJet data breach exposes travel details of 1.2 million customers

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0004594: WestJet

Official noticeago.vermont.gov

Vermont Attorney General: 2025-09-29 WestJet Data Breach Notice to Consumers

Notices filed

TotalJun 13, 2025

Research1,200,000 people

Residents of VTSep 29, 2025

Vermont AGCount not stated

Residents of CASep 30, 2025

California AGCount not stated

Residents of WAOct 3, 2025

Washington AG7,333 people

Residents of OROct 3, 2025

Oregon DOJ1,200,000 people

Residents of TXOct 7, 2025

Texas AG10,487 people

History of this record

source2026-09-25

empty to https://ago.vermont.gov/document/2025-09-29-westjet-data-breach-notice-consumersby backfillSource

data_types2026-09-25

["names","dob","addresses","government-id","other"] to ["names","dob","addresses","government-id","other","health"]by backfillSource

sector2026-09-25

other to transportby seedSource

attack2026-09-25

phishing to hackingby seedSource

data_types2026-09-25

[] to ["names","dob","addresses","government-id","other"]by seedSource

records_basis2026-09-25

empty to organizationby seedSource

records2026-09-25

empty to 1200000by seedSource

disclosed2026-09-25

2025-09-30 to 2025-06-13by seedSource

summary2026-09-25

empty to WestJet disclosed a security incident in June 2025 and later told Maine's attorney general that 1.2 million passengers had data stolen, including names, birth dates, addresses, passports and other ID documents, and rewards account data.by seedSource

title2026-09-25

empty to WestJet cyberattack exposes 1.2 million passengers' travel documentsby seedSource

attack2026-09-25

unknown to phishingby backfillSource

discovered2026-09-25

empty to 2025-06-13by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about WestJet