WestJet investigates cyberattack disrupting internal systems

HELLFIRE

https://www.bleepingcomputer.com/news/security/westjet-investigates-cyberattack-disrupting-internal-systems/
https://www.westjet.com/en-ca/news/2025/advisory--cybersecurity-incident-

… “WestJet is aware of a cybersecurity incident involving internal systems and the WestJet app, which has restricted access for several users,” reads a security advisory on WestJet’s site. … A Saturday morning update says the company’s operation continues to run safely, but the attack has impacted access to some of its software and services. …

Sure this is making SOMEone’s day… dunno if I have any old work contacts I might be able to get some details or not…

Regards

HELLFIRE

https://openjaw.com/newsroom/airline/2025/06/17/from-westjet-to-delta-the-cyberattacks-reshaping-aviation-risk/ – From WestJet to Delta, the Cyberattacks Reshaping Aviation Risk

Don’t know the quality or reliability of the source, but still had this worthwhile bit :

… The past 12 months have been rife with cyber turbulence. Beyond WestJet, here’s a snapshot of some the most significant attacks.

Japan Airlines, December 2024 …

Crowdstrike Security Patch, July 2024 …

Seattle-Tacoma International Airport, 2024 …

Regards

HELLFIRE

https://broadbandbulletin.com/d/4139-qantas-discloses-cyberattack-amid-scattered-spider-aviation-breaches – small update here of HOW the perps may have gotten in…

“BleepingComputer has learned that in the WestJet breach, threat actors exploited a self-service password reset to gain access to an employee’s account, which was then used to breach the network.”

Regards

HELLFIRE

https://www.cbc.ca/news/canada/calgary/westjet-cyberattack-passport-stolen-1.7606145 – WestJet says some passengers’ personal information stolen in cyberattack

… In a note to customers, WestJet says the personal information taken varies from person to person but may include name, date of birth, email address, mailing address, phone number, gender and recent travel booking history including travel booking numbers. … The office of Canada’s privacy commissioner has opened an investigation into the incident.

Regards

GrumpyCanadian

I’m well behind on discussions in the Security tag, but thought this was interesting: the Office of the Privacy Commissioner will be investigating the WestJet breach.

WestJet cybersecurity breach to be investigated by privacy commissioner

HELLFIRE

Dollars to donuts the final report – if one is ever produced – will be filed in that pile where government paperwork goes to die….

My Sarcastic / Cynical 00000010bits

Regards

GrumpyCanadian

As expected, this story isn’t over yet. It seems the miscreants have made off with some customer information:

WestJet says some passengers’ personal information was obtained in a cyberattack in June, however it believes the breach did not involve “sensitive” data in most cases.

They believe credit card/banking information and passwords are safe, but:

some passengers’ personal information was exposed, such as their name, contact details, information and documents provided in connection with their reservation and travel, along with data regarding their relationship with WestJet.

They claim that more details are available on their Web site, and that assistance will be provided in the event of fraud, including remediation.

WestJet says some passengers’ personal info stolen in June security breach

HELLFIRE

Thanks for that. Spoke to an old work buddy who’s at WestJet. SUPPOSEDLY was a voice deepfake attempt to get in… and yeah, it DEFINTELY kept WestJet’s infotech team working overtime for quite awhile…

ADDENDUM https://www.bleepingcomputer.com/news/security/westjet-confirms-recent-breach-exposed-customers-passports/

… However, there is no official attribution for the hackers behind the WestJet breach. … According to the findings, the following data types have been exposed to the attackers, varying per individual:

Full name
Date of birth
Mailing address
Travel documents, such as passport or government ID
Requested accommodations
Filed complaints
WestJet Rewards Member ID, points, and other information
WestJet RBC Mastercard, WestJet RBC World Elite Mastercard, or WestJet RBC World Elite Mastercard information. …

Regards

GrumpyCanadian

HELLFIRE So much for sensitive data not having been exposed! I don’t know what the WestJet spokesperson considers sensitive information, but to me, date of birth, passport and credit card information qualify as rather sensitive. Maybe according to that spokesperson, it’s not sensitive unless it’s my information.

HELLFIRE

https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3f05cd3c-b473-468f-8577-b95f19ffd458.html – Westjet’s filing with the Maine AG, FWIW.

Regards