Canadian airline WestJet, the country’s second-largest carrier, confirmed between June 13 and 14, 2025, that it is responding to a cybersecurity incident that compromised its internal systems and mobile app. The breach has caused access issues for many users, directly impacting the airline’s digital services. While the exact source of the attack is still under investigation, WestJet acknowledged the incident and promptly initiated emergency protocols.

The company activated its internal cybersecurity team to limit the damage and began cooperating with law enforcement and Transport Canada. WestJet has been issuing updates every 12 hours to keep the public informed, emphasizing its commitment to minimizing the effects of the incident. This communication strategy aims to reassure customers and maintain public trust during a period of uncertainty.

No flight delays or cancellations

While digital service disruptions persist, WestJet assured us that flight operations will remain safe and unaffected. No delays or cancellations have been directly linked to the cyberattack. However, passengers are currently experiencing difficulties checking in, modifying reservations, viewing itineraries, and accessing boarding passes via the website or app. These complications have led to growing frustration among travellers.

As a precaution, WestJet has advised customers to exercise caution when sharing personal information and has promised to release more details as the investigation progresses. The most alarming aspect of the breach is what the criminals had access to. If they could steal customer data, that is a potential risk. The company has not said whether this actually happened. We hope it did not. However, if customer data is stolen, it increases the risk of phishing scams, identity theft, and unauthorized financial activity.

Photo: WestJet