Western Alliance Bank Data Breach Exposes SSN's & Driver's Licenses

On March 14, 2025, Western Alliance Bank ("WAB") disclosed a data breach affecting the personal information of its customers. According to the official disclosure filed with the California Attorney General's Office, the breach occurred between October 12, 2024, and October 24, 2024.

An investigation revealed that the breach originated from a vulnerability in a third-party vendor's secure file transfer software. This software was utilized by Western Alliance Bank and numerous other organizations. An unauthorized actor exploited this previously unknown vulnerability, gaining access to a limited portion of Western Alliance's systems and obtaining copies of files stored within those systems.

Western Alliance Bank became aware of the unauthorized access on January 27, 2025. Following an extensive review, the bank determined on February 21, 2025, that the compromised files contained sensitive personal information belonging to customers.

The exposed information includes customers' names, Social Security numbers, drivers' license numbers, and passport information.

Western Alliance Bank's response

Upon discovering the breach, Western Alliance Bank notified law enforcement and initiated a thorough investigation. Additionally, the bank has enhanced its technical security measures to prevent similar incidents from occurring in the future.

To assist affected customers, Western Alliance Bank is offering a complimentary one-year membership of Experian IdentityWorks Credit 3B. This service provides identity protection and monitoring to help detect potential misuse of personal information. Affected individuals are encouraged to enroll in this complimentary service by visiting the Experian IdentityWorks enrollment page and using the activation code provided in the notification letter.

Customers with questions or needing assistance with identity restoration can contact Experian's customer care team at 877-288-8057. Additional guidance on protecting personal information and preventing identity theft is available through the Federal Trade Commission's Identity Theft website.

The full notice to consumers regarding this data breach is available in PDF format at the bottom of this page.