WestJet confirms recent breach exposed customers' passports

WestJet disclosed a cybersecurity incident affecting approximately 1.2 million customers after attackers used social engineering to reset an employee password and gain access via Citrix, compromising internal Windows and Microsoft cloud systems and exposing sensitive personal data including passports and government IDs; the company notified impacted customers, offered two years of identity protection, and is working with law enforcement while attribution remains unconfirmed.