HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
WestJet, an Alberta Partnership
bd_078db9afda69701f · schema v1 · pii pii-v1
Full breach record for WestJet, an Alberta Partnership →WestJet experienced a cybersecurity incident on June 13, 2025, where a sophisticated criminal third party gained unauthorized access to systems holding personal information. The incident is now resolved. Affected data includes names, dates of birth, mailing addresses, and travel document information (passports/government IDs). Credit card numbers and passwords were not compromised. WestJet reported the incident to the FBI and is offering 24 months of identity monitoring to affected US residents.
California clockDiscovered Jun 13, 2025 → Notified Sep 15, 202594d ✗ CA 60-day late16 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_21b3fba3dd8e7bd9South Carolina State AGfiled 2025-09-29(1d gap)Candidate
- bd_6a4e87d06919f5dfNew Hampshire State AGfiled 2025-09-29(1d gap)Verified
- bd_a368060b3708eac5Vermont State AGfiled 2025-09-29(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-612023
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 30, 2025
- Raw hash
- 03f6ee9effd10c844f512eb547915fb00ffe8ed627ba8340a12587ac54a6eb05
Reporting entity
- Name
- WestJet, an Alberta Partnershipnorm: westjet an alberta partnership
- Domain
- westjet.com
Victim entity
- Name
- WestJet, an Alberta Partnershipnorm: westjet an alberta partnership
- Domain
- westjet.com
Incident
- Discovered
- Jun 13, 2025
- Materiality determined
- —
- Notification sent
- Sep 15, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement, including the Federal Bureau of Investigation
Compliance
- Time to disclose
- 16 weeks(109 days from discovery to filing)
- Compliance flags
- CA 60-day late · 94d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 13, 2025→ Notified: Sep 15, 202594d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.