Canadian airline WestJet is warning of “intermittent interruptions or errors” on its app and website as it investigates a cybersecurity incident.
The airline first became aware of issues on Friday, June 13. It said “internal systems and the WestJet app” were experiencing issues, restricting access for several users.
Details from its announcement – like the fact that it engaged outside experts, law enforcement, and Transport Canada – suggest foul play rather than a mere technical fault.
However, it is not being labeled as an attack, nor has the airline confirmed any malicious intent behind whatever is causing these issues.
“It is too early to speculate on details, though we are committed to sharing what we know as information becomes available,” the company said via its dedicated page for updates.
“WestJet advises that guests and employees exercise additional caution at this time, especially when sharing personal information.”
Since the security troubles were first announced, WestJet has repeatedly said its ability to schedule and complete flights remains unaffected, and that’s still true per its most recent update on Sunday afternoon:
“As we continue work to determine the extent and overall impact of the cybersecurity incident, some guests may temporarily encounter intermittent interruptions or errors while using the WestJet app and/or WestJet.com and we are working to resolve these issues.
“Our operations remain safe and stable and are not impacted by the situation. WestJet is grateful to our guests, our people and our partners for their support and patience. Regular updates will continue to be provided as more details can be shared.”
There is no indication that the situation is analogous to the major airline disruptions of last year caused by CrowdStrike’s faulty Falcon sensor update.
Recent complaints aired by WestJet customers also suggest there are no major issues with its operations, while others have confirmed the same. Only the usual grievances that affect airline passengers generally on a day-to-day basis are being raised at the time of writing.
Some customers have publicly asked whether they need to change their passwords, although these have gone unanswered.
Others have suggested that features such as the app’s password retrieval function, which also allows users to change their credentials, are unavailable. Responding, customer service agents apologized and promised another update “in a few hours.”
The Register contacted the Canadian Centre for Cyber Security and Transport Canada for a statement, but neither immediately responded. ®
