Back Mlex

WestJet commits to improving security measures following data breach

Mlex • July 14, 2026

MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.

Know what others in the room don’t, with features including:

Experience MLex today with a 14-day free trial.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

WestJet Data Breach: Over 5 Million Affected, Security Measures Enhanced WestJet experienced a significant data breach in 2025, affecting over five million customers and employees. An unauthorized third party exploited social engineering tactics to bypass multi-factor authentication and accessed an employee's account with administrative privileges. This breach allowed the attacker to control WestJet's virtual servers and exfiltrate sensitive data, including names, birth dates, email addresses, and passport information. In response, WestJet has committed to improving its security measures, including engaging an external security firm to assess its enhanced protocols. The Office of the Privacy Commissioner of Canada is overseeing the investigation and will remain open until WestJet fulfills its commitments. The breach highlights ongoing vulnerabilities in cybersecurity practices, particularly regarding identity and access controls. 2 sources 65

WestJet commits to improving security measures following data breach

The full story

Extracted Entities

Attack Types (1)

Companies (1)