Canadian low-cost carrier WestJet is offering identity protection services to customers affected by a data breach that took place in June this year.
In its latest update on the incident, the airline said it has identified and contacted affected customers, where able to do so.
Customers that received emails or letters from WestJet were informed as to what personal information of theirs may have been involved in the incident, and how to access identity protection services.
WestJet is also inviting non-contacted customers to get in touch with the airline, if they would like to know whether their personal data may have been affected.
On June 13, WestJet identified suspicious activity on its systems. Following an investigation, it determined that a “sophisticated” criminal third party had gained unauthorised access.
The breach was contained and the systems secured, but the hacker was able to access non-financial, travel-related information about WestJet’s customers.
For certain individuals, that data may have included names, contact details, information and documents provided in connection with their reservation and travel, and data regarding their relationship with WestJet.
“While it is possible that some of this information could be used for identity theft or fraud, WestJet is not aware of any misuse of the relevant data for such purposes,” the airline said in its latest update.
No credit card or debit card numbers, and no customer passwords, were obtained during the breach, WestJet added.
The airline continues to cooperate with Canadian and international law enforcement agencies on forensic investigation of the incident.