I received a verification text today for my Alaska account even though I was not trying to log in. I recently enabled two-factor authentication, which makes me think someone is still attempting to access the account.
For some background, around six months ago I suddenly could not access my account. When I contacted Alaska, they told me that both my email and phone number on the account had been changed by someone else. I caught it within about a day and thankfully no miles were stolen. I changed the password to something completely new and very complex.
Fast forward to now, Alaska has implemented two-factor verification and I have received unexpected login verification texts multiple times in the last week.
What confuses me is that I changed the password to something unique and extremely difficult to guess. I also have more than 2 million miles in the account, so I am wondering if someone is still actively targeting it.
Has anyone else experienced something similar? Is there something beyond changing the password and enabling two-factor authentication that I should be doing?
0