WestJet data breach class action alleges 1.2M customers’ info compromised

Edited by: Top Class Actions | November 18, 2025

Category: Data Breach

Close up of WestJet sign on the building at its World Headquarters in Calgary, Alberta, Canada — (Photo Credit: JHVEPhoto/Shutterstock)

WestJet data breach class action overview:

Who: Plaintiff Irene Yee filed a class action lawsuit against WestJet Airlines Ltd.
Why: Yee claims WestJet failed to properly secure and safeguard the personal data of 1.2 million customers during a data breach.
Where: The WestJet data breach class action was filed in California federal court.

A new class action lawsuit claims WestJet failed to properly secure and safeguard the personally identifying information (PII) of more than 1.2 million customers during a data breach earlier this year.

Plaintiff Irene Yee’s class action lawsuit alleges WestJet was negligent and reckless in how it maintained personally identifying information, leaving it vulnerable to cyberattacks.

The WestJet data breach occurred on or about June 13, when cybercriminals infiltrated WestJet’s protected network servers and accessed highly sensitive personally identifying information.

“Upon information and belief, the mechanism of the cyberattack and potential for improper disclosure of Plaintiff’s and Class Members’ PII was a known risk to Defendant, and thus Defendant was on notice that failing to take steps necessary to secure the PII from those risks left that property in a dangerous condition,” the WestJet class action alleges.

Class action: WestJet waited months to inform victims of data breach

Yee argues WestJet failed to inform victims of the WestJet data breach until Sept. 29 — more than three months after the airline claims to have discovered the data breach.

“Plaintiff and Class Members were wholly unaware of the Data Breach for months until they received letters from Defendant informing them of it,” the WestJet class action alleges.

Yee claims WestJet is guilty of negligence, breach of implied contract, unjust enrichment and declaratory judgment. She demands a jury trial and requests declaratory and injunctive relief and an award of actual, compensatory and punitive damages for herself and all class members.

Air France is also facing legal action over a recent data breach, while other airlines, including Delta, American Airlines and Alaska Airlines, have incurred fines or accusations over data breaches and other incidents.

Were you affected by the WestJet data breach? Let us know in the comments.

The plaintiff is represented by (Eddie) Jae K. Kim and Gerald D. Wells, III of Lynch Carpenter, LLP.

The WestJet data breach class action is Irene Yee v. WestJet Airlines Ltd., Case No. 3:25-cv-02982, in the U.S. District Court for the Southern District of California.