Alaska Air Group Federal Credit Union Data Breach Exposes Sensitive Member Information A cybersecurity incident at Alaska Air Group Federal Credit Union (AAGCU) has compromised the personal data of over 10,700 members across the U.S. The breach occurred when unauthorized actors exploited a vulnerability in AAGCU’s third-party IT service provider’s systems, gaining access to the credit union’s network on or around March 5, 2026. AAGCU detected the breach on March 9, 2026, and immediately launched an investigation with cybersecurity experts while securing its IT environment. The probe confirmed that attackers may have accessed and exfiltrated files containing sensitive member information, including Social Security numbers, account numbers, dates of birth, driver’s license and passport numbers, routing numbers, and tax identification numbers. Notifications to affected individuals began on April 16, 2026, with 10,705 people impacted nationwide, including eight in Maine. AAGCU, a member-owned financial institution serving employees and families of Alaska Airlines, Hawaiian Airlines, Horizon Air, and related affiliates, has not disclosed further details on the attack’s origin or the third-party provider involved. Legal representatives are now investigating potential compensation claims for those affected, citing possible eligibility for damages related to the exposure of personal data.