WestJet, an Alberta Partnership
bd_6a4e87d06919f5df · schema v1 · pii pii-v1
Full breach record for WestJet, an Alberta Partnership →WestJet, an Alberta Partnership, notified the NH Attorney General of a cybersecurity incident affecting 289 New Hampshire residents. On June 13, 2025, WestJet identified suspicious activity and determined a sophisticated criminal third party gained unauthorized access to its systems. The attacker obtained certain data, including names, dates of birth, mailing addresses, and travel document information (e.g., passport numbers). Credit card numbers and passwords were not compromised. WestJet engaged forensic experts, secured its environment, and reported the incident to the FBI. The incident is now resolved. WestJet is offering 24 months of complimentary identity theft and monitoring services.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 13, 2025
Discovered
Sep 29, 2025
Filed
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- Indiana State AGbd_08b8ad67ebdf12712025-09-29Verified
- South Carolina State AGbd_21b3fba3dd8e7bd92025-09-29Verified
- Montana State AGbd_46b2ae93fc4dc8f22025-09-29Candidate
- Vermont State AGbd_a368060b3708eac52025-09-29Verified
Show 6 more filings ↓Show fewer ↑up to 8d gap
- California State AGbd_078db9afda69701f2025-09-30 · +1dVerified
- Maine State AGbd_d8c21e8e887f55602025-09-30 · +1dVerified
- Oregon State AGbd_0dd2d099a5ac7f742025-10-03 · +4dVerified
- Washington State AGbd_75d83581529d1d882025-10-03 · +4dVerified
- Massachusetts State AGbd_7cf756e8a180c7a72025-10-04 · +5dVerified
- Texas State AGbd_4405e7fd2d88d7fb2025-10-07 · +8dVerified
Showing first 10 of 13 linked disclosures.
Filing propagation · 11 filings · 11 states
View merged incident ↗Pattern: first filing Sep 29 (IN), last Oct 7 (TX) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.