Where does the WestJet case file come from?

Every entry is taken from the breach report WestJet lodged with the Oregon Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: WestJet Data Breach

This file collects the dated facts on record for the WestJet incident. The state report is dated October 3, 2025. The incident itself is dated June 13, 2025.

Timeline

112 days separate the incident date from the date it was reported.

June 13, 2025Incident dateWhen the filing says the breach took place.
October 3, 2025Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state: Oregon
Date reported: October 3, 2025
Incident date: June 13, 2025
Receiving office: Oregon Attorney General

Case notes

WestJet filed a report with Oregon officials concerning a data security incident. This public record, submitted on October 3, 2025, details an event that occurred on or about June 13, 2025.

While the specific nature of the incident and the categories of personal information involved were not detailed in the available public filing, WestJet's report indicates that some individuals' personal information may have been exposed.

The public filing indicates that an investigation into the incident is currently ongoing. This suggests that further details may emerge as WestJet continues to assess the full scope and impact of the data exposure.

Individuals who receive a direct notification from WestJet concerning this incident should carefully review the information provided. It is always wise to remain vigilant for any unusual account activity or communications that request personal details.

Implementing general security practices, such as enabling multi-factor authentication where available and using strong, unique passwords for online accounts, can help mitigate risks associated with data exposures.

This information is based on public filings made with regulatory bodies, providing a record of the reported security event.

Questions about this case file

Where does the WestJet case file come from?: Every entry is taken from the breach report WestJet lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Oregon data breaches

Filing source: Oregon Attorney General

Named in the WestJet breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Oregon case files