Where does the WestJet case file come from?

Every entry is taken from the breach report WestJet lodged with the California Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: WestJet Data Breach

This file collects the dated facts on record for the WestJet incident. The state report is dated September 30, 2025. The incident itself is dated June 13, 2025.

Timeline

109 days separate the incident date from the date it was reported.

June 13, 2025Incident dateWhen the filing says the breach took place.
September 30, 2025Report filed in CaliforniaDate the notice was lodged with the California Attorney General.

Case facts

Filing state: California
Date reported: September 30, 2025
Incident date: June 13, 2025
Receiving office: California Attorney General

Case notes

WestJet has publicly reported a data breach incident that took place on June 13, 2025. The company filed notice of the breach on September 30, 2025, indicating that an investigation into the matter is actively ongoing to determine the full scope.

The specific categories of personal information involved in this breach have not been detailed in the public filing. As such, it is currently unknown what type of data may have been accessed or acquired during the incident.

Because the investigation is still in progress, individuals who may have been affected by this WestJet breach are advised that the full implications of the exposure are yet to be determined. The company has not specified the number of people impacted by this event.

While details remain limited, individuals who have engaged with WestJet should remain vigilant. It is generally recommended to monitor your financial and personal accounts for any unusual activity. Consider changing passwords for online services, especially if you reused them across multiple platforms.

Always be cautious of unsolicited communications that claim to be from WestJet or other entities, as these could be phishing attempts. The details shared here are based on public regulatory filings, and further information may emerge as WestJet's investigation progresses.

Questions about this case file

Where does the WestJet case file come from?: Every entry is taken from the breach report WestJet lodged with the California Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

California data breaches

Filing source: California Attorney General

Named in the WestJet breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More California case files