Threat Intelligence Brief
Curated summary with source attribution
Source: priv.gc.ca
Threat Risk: High
Victim: WestJet customers and employees
Incident: Unauthorized access to cloud storage via MFA bypass and social engineering.
Impact: Exfiltration of sensitive personal information and government identifiers for over five million people.
Attacker: Unidentified threat actors
Analysis: The incident demonstrates that traditional multi-factor authentication can be circumvented through targeted social engineering. By hijacking an administrative account, the attacker gained broad access to virtual servers and cloud storage. This highlights the critical risk associated with high-privilege accounts and the necessity of phishing-resistant authentication.
Recommendations: Deploy phishing-resistant MFA such as FIDO2 or hardware security keys; Implement strict least-privilege access controls for administrative accounts; Enhance security awareness training specifically targeting social engineering tactics
Source: Office of the Privacy Commissioner of Canada
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source