Western Alliance Bank ("WAB") Data Breach Notice (Oregon Attorney General)

The October 12, 2024 breach at Western Alliance Bank has left 78,338 people with their personal information exposed. The bank did not notify Oregon residents until June 30, 2025 — 261 days later.

What the 261-day gap actually means for you

The filing shows the incident occurred on October 12, 2024. The notification reached the Oregon Department of Justice on June 30, 2025. That interval is long enough to matter. During those eight and a half months, the exposed records could have been used, sold, or quietly stored while you remained unaware.

The record lists only one broad category: personal information. No passwords were exposed. No permanent government identifiers such as Social Security numbers are confirmed in the filing. This is genuinely good news. Your account credentials were not part of the breach, so you do not need to change any Western Alliance Bank password because of this incident.

What personal information exposure actually enables

Even without confirmed SSNs, the personal information taken can still be valuable to identity thieves. Names combined with addresses, dates of birth, or financial details allow attackers to build convincing profiles. They can attempt account takeover at other institutions, file fraudulent tax returns, or open new accounts in your name.

Because the filing uses a single general category rather than listing specific fields, you cannot know exactly which details about you were included. The only reliable way to find out is the letter Western Alliance Bank is required to send directly to affected customers. If you have not received one, it is likely your records were not part of the 78,338 affected. However, if you have moved since October 12, 2024, the letter may have gone to an old address. In that case, contact the bank directly to confirm whether you were included.

Why this exposure stays risky for years

Unlike a credit card number that can be replaced, personal information does not expire. Once it is out, it remains useful to criminals for the rest of your life. A thief with enough of your details can slowly piece together a full identity profile, making future fraud easier and harder to detect.

The scale — 78,338 people — is large, but the filing does not reveal whether this reflects a single compromised system or a broader issue. What matters to you is that your information is now outside the bank’s control. The delay in notification simply gave that information more time to circulate before you could act.

How to protect yourself now

Place a fraud alert with the three major credit bureaus. This forces lenders to verify your identity before opening new accounts in your name. It is free, lasts one year, and is the single most effective step you can take today.

Review your bank and credit card statements carefully for any unfamiliar activity. Set up transaction alerts so you are notified immediately of any movement. Even small test charges are worth investigating.

Consider freezing your credit reports. Unlike a fraud alert, a freeze stops new accounts completely until you lift it. It is the strongest barrier against new-account fraud and remains one of the best defenses when personal information has been exposed.

Monitor your tax filings. Identity thieves sometimes use stolen personal details to file fraudulent returns and claim refunds. Check your IRS online account regularly and file your taxes early next year so a criminal cannot file first.

If you receive the notification letter from Western Alliance Bank, read it carefully. It will tell you exactly which types of personal information were linked to your records and may offer additional protections such as free credit monitoring. Take advantage of any services provided.

The breach itself cannot be undone. Your personal information cannot be taken back. What you still control is how quickly and thoroughly you respond. Starting with a fraud alert or credit freeze today limits what thieves can do with whatever was taken on October 12, 2024.