Alaska Air Group Federal Credit Union

Alaska Air Group Federal Credit Union reported a data breach to the Oregon Attorney General. The breach was reported on 2026-04-17. The breach occurred during 3/5/2026 - 3/5/2026. The breach was discovered on 3/5/2026. 10,705 individuals were affected. Notice was sent on 4/16/2026.

Alaska Air Group Credit Union notified Massachusetts residents of a cybersecurity incident that may have impacted personal data. Due to Massachusetts legal requirements, specific details about the nature of the incident were not disclosed. The organization is offering 24 months of complimentary Experian IdentityWorks and Identity Restoration services to affected members. No specific dates of discovery or occurrence were provided in the notice.

Alaska Air Group Credit Union (AAGCU) notified members of a cybersecurity incident on or about March 5, 2026 in which unauthorized actors compromised AAGCU's third-party IT service provider and used that access to reach AAGCU IT systems. The investigation determined the actors may have accessed and copied certain files from AAGCU systems. Potentially affected data elements include account number, date of birth, driver's license number, passport number, Social Security number, tax identification number, and routing number; no passwords or PINs were involved. AAGCU resecured its environment, engaged cybersecurity experts, and offered 24 months of Experian IdentityWorks credit monitoring and identity restoration. Notice letter dated April 16, 2026; two Rhode Island residents were notified, and the filing was submitted to the California Attorney General. Total affected count is not disclosed in this sample notice.

Alaska Air Group Federal Credit Union reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-04-17. The reporting organization type is Financial Services. 1 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit or Debit Account Info.

Alaska Air Group Federal Credit Union reported a cybersecurity incident on March 5, 2026, involving unauthorized access to its IT systems via a third-party IT service provider. The breach affected 10,705 individuals, including 8 Maine residents. Compromised data included account numbers, driver's licenses, SSNs, and routing numbers. AAGCU engaged cybersecurity experts, resecured its environment, and offered 24 months of credit monitoring.

Alaska Air Group Federal Credit Union notified WA AG of a third-party IT provider breach affecting 5,092 WA residents. Unauthorized actors accessed systems between March 9, 2026, after being detected on March 5, 2026. Data included SSNs, DOBs, driver's licenses, and financial account numbers. Notices sent April 16, 2026.

Alaska Air Group Credit Union reported a data breach to the Indiana Attorney General. The breach occurred on 2026-03-05 and was reported on 2026-04-16. 19 Indiana residents were affected. 10,705 individuals affected in total.

Alaska Air Group Credit Union notified the NH Attorney General that unauthorized actors accessed its IT systems via a third-party IT service provider incident on March 5, 2026. The breach affected 4 New Hampshire residents, exposing SSNs, driver's license/passport numbers, DOB, and financial account/routing numbers. Data exfiltration is suspected. The credit union engaged cybersecurity experts, resecured systems, and offered 24 months of credit monitoring.

Alaska Air Group Credit Union notified Montana regulators of a cybersecurity incident occurring on or about March 5, 2026, involving a third-party IT service provider. Unauthorized actors accessed AAGCU systems via the provider, potentially copying files containing personal data including SSNs, driver's license numbers, and financial account numbers. AAGCU resecured its environment, engaged forensic experts, and is offering 24 months of credit monitoring. Notification letters were dated April 16, 2026.