Latest Airline Security Breach Leaks Passports, IDs, Other Info

Canadian airline WestJet confirmed a June cyberattack exposed customer data including names, birth dates, passports, government IDs, addresses, and WestJet Rewards information, potentially linked to “Scattered Spider” hacking group. The breach, disclosed June 13 and investigated through September 15, did not compromise credit card numbers, CVV codes, or account passwords, though the FBI-involved investigation remains ongoing to determine full scope. WestJet is offering affected customers two-year complimentary identity theft protection services that must be redeemed by November 30.​​​​​​​​​​​​​​​​