Alaska Air Group Federal Credit Union Data Breach Impacts 10k Members

Alaska Air Group Federal Credit Union (AAGCU) disclosed a data breach involving a third-party IT service provider.

On or about March 5, 2026, a third-party information technology service provider used by AAGCU experienced a cybersecurity incident, according to the company's notice to consumers. The breach did not start within the credit union's own systems. Instead, unauthorized actors first compromised the third-party provider and then used that access as a pathway into AAGCU's IT systems.

The breach affected approximately 10,705 people in the United States.

An investigation into the incident determined that the unauthorized actors may have accessed and copied certain files stored on AAGCU's systems.

The types of personal information that may have been exposed include Social Security numbers, account numbers, dates of birth, driver's license numbers, passport numbers, routing numbers and tax identification numbers.

The breach was disclosed to the California Attorney General on April 17, 2026. It was also reported to the Maine Attorney General on the same date, with eight Maine residents identified as affected. AAGCU began notifying affected consumers in writing on April 16, 2026.

Alaska Air Group Federal Credit Union's response

The credit union said it is unaware of any attempted or actual misuse of affected individuals' information. However, because the data potentially accessed includes highly sensitive information such as Social Security numbers and financial account details, AAGCU is offering all potentially affected individuals 24 months of complimentary credit monitoring and identity protection services through Experian IdentityWorks.

The Experian membership includes several features designed to help protect against identity theft. These include credit monitoring of the member's Experian credit file, an Experian credit report at signup, access to identity restoration specialists and $1 million in identity theft insurance coverage.

Through Experian's ExtendCare program, affected individuals will continue to receive the same level of identity restoration support even after their 24-month membership expires.

To enroll in the free credit monitoring, affected individuals can visit the Experian IdentityWorks enrollment page or call 877-769-1112, Monday through Friday, 6 a.m. to 6 p.m. Pacific Time. The enrollment deadline is July 31, 2026. Individuals will need the activation code included in their written notification letter to complete enrollment.