WestJet
Disclosed Jun 13, 20251 year ago1,200,000 affectedConfirmed
WestJet cyberattack exposes 1.2 million passengers' travel documents
WestJet disclosed a security incident in June 2025 and later told Maine's attorney general that 1.2 million passengers had data stolen, including names, birth dates, addresses, passports and other ID documents, and rewards account data.
What is known
| People affected | 1,200,000 (as reported by the organization) |
|---|---|
| Disclosed | Jun 13, 2025 |
| Discovered | Jun 13, 2025 |
| Happened | Jun 13, 2025 |
| Attack | Hacking |
| Data exposed | Names, Dates of birth, Addresses, Government IDs, Other, Health |
| Sector | Transport · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: WestJetoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: WestJetatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: WestJetjustice.oregon.gov · Official notice | Official notice |
| Data breach at Canadian airline WestJet affects 1.2M passengerstechcrunch.com · News | News |
| WestJet data breach exposes travel details of 1.2 million customersbleepingcomputer.com · News | News |
| Texas Attorney General data security breach report BR-0004594: WestJetoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2025-09-29 WestJet Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jun 13, 2025 | 1,200,000 |
| Vermont AGresidents of VT | Sep 29, 2025 | |
| California AGresidents of CA | Sep 30, 2025 | |
| Washington AGresidents of WA | Oct 3, 2025 | 7,333 |
| Oregon DOJresidents of OR | Oct 3, 2025 | 1,200,000 |
| Texas AGresidents of TX | Oct 7, 2025 | 10,487 |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-09-29-westjet-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","dob","addresses","government-id","other"] to ["names","dob","addresses","government-id","other","health"] · backfill source
- 2026-09-25 · sector: other to transport · seed source
- 2026-09-25 · attack: phishing to hacking · seed source
- 2026-09-25 · data_types: [] to ["names","dob","addresses","government-id","other"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 1200000 · seed source
- 2026-09-25 · disclosed: 2025-09-30 to 2025-06-13 · seed source
- 2026-09-25 · summary: empty to WestJet disclosed a security incident in June 2025 and later told Maine's attorney general that 1.2 million passengers had data stolen, including names, birth dates, addresses, passports and other ID documents, and rewards account data. · seed source
- 2026-09-25 · title: empty to WestJet cyberattack exposes 1.2 million passengers' travel documents · seed source
- 2026-09-25 · attack: unknown to phishing · backfill source
- 2026-09-25 · discovered: empty to 2025-06-13 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.