Canada’s second-largest airline, WestJet, is currently investigating a cybersecurity incident that disrupted its mobile app and some internal systems. The issue came to light on June 13, 2025, and is now being handled by WestJet’s internal teams, in coordination with law enforcement and government agencies.
According to WestJet, the attack specifically targeted systems connected to their WestJet mobile app, which left many users temporarily unable to access it. Along with that, several internal systems used by the airline were also affected. Thankfully, flight operations and safety remained fully functional, and no major disruptions to scheduled flights were reported.
The airline confirmed that it took immediate action to limit the impact of the incident and protect customer data. In a public statement, WestJet said they are working “around the clock” with cybersecurity experts, law enforcement, and Transport Canada to understand the full scope of the breach and to ensure systems are safely restored.
While some services have been restored, the airline noted that certain internal functions and digital platforms may still experience delays or limited availability. Customers were advised to remain patient while the team continues its efforts to resolve the issue completely.
One of the most concerning parts of the investigation is whether any sensitive customer or employee data was accessed or stolen. WestJet said it is still too early to confirm that, but protecting personal data remains a top priority. They are conducting a deep internal review to assess if any data exfiltration occurred.
The airline is also working on enhancing its cybersecurity infrastructure to prevent future incidents. In their official communication, WestJet emphasized that their team is committed to learning from this event and strengthening defenses to reduce the risk of similar threats moving forward.
This cyberattack comes at a time when critical infrastructure in Canada, including aviation and transportation, has become a frequent target for cybercriminals. Experts have raised concerns that attackers may be shifting their focus to industries with large customer databases and operational dependencies on digital platforms.
According to Infosecurity Magazine, there is no official confirmation yet on the identity of the attacker or the group behind this breach. WestJet has not disclosed if it was a ransomware-style attack, a targeted breach, or part of a broader supply chain compromise. Investigations are still ongoing, and more details may emerge in the coming days.
If you’re a WestJet customer, the airline advises you to stay alert. While no confirmed data theft has been announced, it’s a good idea to change your passwords, especially if you’ve used the same credentials on other platforms. Also, keep an eye out for phishing emails or suspicious login attempts, and only rely on official WestJet communications for updates.
WestJet concluded their public message by thanking passengers for their understanding and patience. They reiterated their commitment to transparency, promising to notify users immediately if any personal data is found to be compromised.
Stay alert, and keep your security measures updated!
Source: Follow cybersecurity88 on X and LinkedIn for the latest cybersecurity news
