Alaska Air Group Federal Credit Union Data Breach Impacts 10k Members

Alaska Air Group Federal Credit Union (AAGCU) disclosed a data breach involving a third-party IT service provider. The breach affected approximately 10,705 people in the United States, including 5,092 Washington residents, 19 Indiana residents, eight Maine residents and four New Hampshire residents.

On or about March 5, 2026, a third-party information technology service provider used by AAGCU experienced a cybersecurity incident.

The breach did not start within the credit union's own systems. Instead, unauthorized actors first compromised the third-party provider and then used that access as a pathway into AAGCU's IT systems.

An investigation into the incident determined that the unauthorized actors may have accessed and copied certain files stored on AAGCU's systems.

The types of personal information that may have been exposed include names, Social Security numbers, account numbers, dates of birth, driver's license numbers, passport numbers, financial and banking information, routing numbers and tax identification numbers.

The breach was disclosed to the California, Indiana, Maine, New Hampshire, Oregon, Vermont and Washington attorneys general offices starting on April 16, 2026. AAGCU began notifying affected consumers in writing on April 16, 2026.

Alaska Air Group Federal Credit Union's response

AAGCU is offering all potentially affected individuals 24 months of complimentary credit monitoring and identity protection services through Experian IdentityWorks.

The Experian membership includes several features designed to help protect against identity theft. These include credit monitoring of the member's Experian credit file, an Experian credit report at signup, access to identity restoration specialists and $1 million in identity theft insurance coverage.

Through Experian's ExtendCare program, affected individuals will continue to receive the same level of identity restoration support even after their 24-month membership expires.

To enroll in the free credit monitoring, affected individuals can visit the Experian IdentityWorks enrollment page or call 877-769-1112, Monday through Friday, 6 a.m. to 6 p.m. Pacific Time. The enrollment deadline is July 31, 2026. Individuals will need the activation code included in their written notification letter to complete enrollment.