WestJet investigating cyber breach, warns of fraud risks

WestJet Airlines, the second-largest airline company in Canada, has launched an investigation into a cybersecurity incident involving its internal systems and the WestJet app.

On June 13th, 2025, the Calgary, Alberta-based airline company became aware of a cybersecurity incident. As a precaution, the company decided to restrict access to its internal systems and WestJet app for several users.

“We have activated specialized internal teams in cooperation with law enforcement and Transport Canada to investigate the matter and limit impacts,” WestJet wrote in a press release that was published on its website and X.

The airline says it has expedited efforts to maintain the safety of its operation and protect sensitive data and personal information for both guests and employees. In addition, the company adds that it’s “too early to speculate on details” but promises to share any new information every 12 hours, or sooner, as it becomes available.

WestJet advises that guests and employees exercise additional caution at this time, especially when sharing personal information, because it could be used by cybercriminals and scammers to defraud unsuspecting victims, including identity theft, targeted phishing attacks, and other forms of fraud.

“Our operation is running safely and remains unaffected by the current situation at this time. We are actively working to understand the extent of the impact and have expedited resolution efforts. We apologize to our guests and employees for any interruptions they may be experiencing as a result,” the airline company states in its latest update.

At this point, it remains unclear who’s responsible for the incident. WestJet hasn’t disclosed any information regarding how the attackers gained access to its IT system or whether any ransom demands were made.

WestJet Airlines is the second company in Canada’s critical infrastructure to be targeted by hackers recently. Back in April, Nova Scotia Power, Canada’s leading electrical supplier, announced that it had been struck by a “cybersecurity incident” that impacted its business IT networks and customer account access.

“This incident doesn't impact our ability to provide safe, reliable power to our customers. Customer Care is currently available for outages and emergencies through our outage line. Our IT team is working diligently with cybersecurity experts to bring affected systems back online,” the power company said in a statement at the time.

In addition, Nova Scotia Power said it had notified law enforcement and was “working around the clock” to restore its systems.