Canadian airline WestJet is informing customers that the cyberattack disclosed in June compromised their sensitive information, including passports and ID documents.
WestJet is a major airline in North America that operates a fleet of 153 aircrafts and services 104 destinations, carrying over 25 million travelers annually.
On June 13, the company disclosed a cybersecurity incident that disrupted certain internal systems and made the WestJet app unavailable to customers.
Around that time, the Scattered Spider threat group focused their attacks on organizations in the aviation industry. However, there is no official attribution for the hackers behind the WestJet breach.
In the days following the disclosure, WestJet published multiple updates assuring customers that all appropriate measures to protect their data were being implemented, but the communications did not specify if the hackers managed to access any sensitive information.
The notification to customers was shared with authorities in the U.S. and confirms the impact, based on the results of the investigation that the company completed on September 15.
According to the findings, the following data types have been exposed to the attackers, varying per individual:
Full name
Date of birth
Mailing address
... continue reading