WestJet data breach exposes travel details of 1.2 million customers

WestJet disclosed a cybersecurity incident that has been confirmed to have exposed personal information for about 1.2 million customers — including full names, dates of birth, mailing addresses, travel documents (passports/IDs), and loyalty account details. The attackers reportedly used social engineering to reset an employee password and accessed the network via Citrix, compromising Windows networks and the company's Microsoft cloud environment; the FBI is investigating and WestJet is offering two years of identity theft protection to impacted customers.