WestJet and Hawaiian Said Flight Operations Were Not Affected

Both WestJet and Hawaiian Airlines stated that their operations were unaffected by the June 2025 incidents.

And often should. "No evidence of misuse" is technically accurate and unearned, per 25-1219, because identification is impossible. "Contained" is a characterisation that sometimes gets revised, per 25-0807.

Operations, though, are externally verifiable. Flights either departed or they did not. An airline claiming unaffected operations is making a checkable statement in a sector where thousands of people would notice immediately.

Jaguar Land Rover’s corporate compromise stopped its production lines for five weeks at 25-0902. United Natural Foods could not invoice or allocate stock at 25-0606. Asahi suspended manufacturing and logistics at 25-1101.

In each, an intrusion into the business estate crossed into the operational one. Aviation, which regulates and certifies its operational systems separately from corporate IT, is one of the few sectors where that boundary held under test.

Airline operational systems sit under aviation safety oversight, with change control, certification and separation requirements that exist for safety rather than security reasons.

This desk filed at 25-1223 that regulation cannot reach persuasion, prompt injection or stolen keys. This is the counter-example: a safety regime, built for other purposes, produced the segmentation that a security argument has repeatedly failed to fund elsewhere.

Qantas, in the same campaign and the same month, lost data on up to 5.7 million customers at 25-0701. Operations unaffected is not incident avoided.

Graded medium: the statements are the companies’ own, and this desk cannot establish what data was reached at either carrier.