PHP Vulnerability Responses by Company

WestJet, an Alberta Partnership

Companies / web services
Aliases / services
WestJet / ウエストジェット / WestJet, an Alberta Partnership
Official website
https://www.westjet.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Notified WestJet guest and WestJet Rewards information

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

An intrusion detected June 13, 2025 led to confirmed data acquisition; US-resident analysis concluded September 15, 2025. Travel-document, contact and membership data may be involved, but card numbers, CVVs and passwords were excluded.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Read your notice and alert others linked to the same booking. Review statements and credit reports, report suspicious activity, and follow the notice's regional and deadline conditions for assistance.

Official service URL

Source URLs

  1. Official operator evidencehttps://www.westjet.com/en-us/uscybernoticeService and operation documentation
  2. Official incident noticehttps://oag.ca.gov/system/files/US%20Loyalty%20A%20-%20Template%20Notice%28700087788.1%29.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies WestJet, an Alberta Partnership and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments