WestJet customers raise privacy concerns after 'technical issue' with airline app

WestJet said it's investigating after a "technical issue" with the airline's app Wednesday afternoon allowed some users to see the personal data of other customers.

Several people told CBC News they could see profile information of other users which included phone numbers, home addresses, dates of birth, email addresses, WestJet dollar and flight voucher details, and in some cases, the last four digits of a user's credit card number.

In an emailed statement to CBC News, a WestJet spokesperson said at 3:53 pm MT, "a technical issue was identified that impacted guest profiles on the WestJet App." It added the issue was resolved at 4:27 pm MT.

However, Paul Baines, a WestJet app user who was able to see multiple profiles on the app, said he believes the issue lasted an hour longer than WestJet indicated.

Baines, who is from London, England, is visiting his partner Victoria Angus in Toronto. Angus said she first noticed the issue around 3 p.m. MT when she logged onto her app to check flights to London.

"When I went into my profile, the profile had some random person's name," Angus said. She could see the person's contact information along with some of their credit card information. 

When she went to see her member information, Angus said she saw the personal information of a second person.

"Four or five times this was happening that it was randomly putting in different profile information every time I refreshed the screen."

Baines said when he looked on the app, in some cases he could see the last four numbers of other users' credit cards and the name of the credit card company, in addition to other private data.

"There was enough information that if you had a nefarious actor, you could have done damage to people's data records," he said.

"This is a very serious data breach with regards to this data being available."

In its statement, WestJet apologized to guests for the disruption and said it's investigating the issue.

"We take the privacy of our guests extremely seriously and will continue to provide updates to our guests as required," WestJet said. 

WestJet did not respond to CBC's questions about how many people were impacted by the technological glitch and how many users' personal information was shared.