Almeida Law Group is investigating a data breach at Bristol Bay Native Corporation. The breach occurred on April 1st–3rd, 2026 and was discovered on May 20th, 2026. If you were affected, contact Almeida Law Group.
About Bristol Bay Native Corporation
Bristol Bay Native Corporation (BBNC) is one of thirteen Alaska Native Regional Corporations established under the Alaska Native Claims Settlement Act of 1971. It is a for-profit, diversified holding company headquartered in Anchorage, Alaska, with approximately 10,500 Alaska Native shareholders and nearly $2 billion in annual revenue. BBNC operates through subsidiary companies across five major business lines: oilfield and industrial services, petroleum distribution, government services, construction services, and tourism.
What Happened?
Bristol Bay Native Corporation was listed in a Texas Attorney General data security breach report published on June 22nd, 2026. According to the filing, the breach occurred between April 1st, 2026 and April 3rd, 2026 and was discovered on May 20th, 2026. The incident exposed names and financial information, such as account numbers or credit and debit card numbers, belonging to 368 individuals. As of the June 22nd, 2026 filing date, Bristol Bay Native Corporation had not yet provided notice to affected consumers — a notable gap given that the breach was discovered more than a month earlier.
This incident is not the first cybersecurity event to affect the BBNC corporate family. In 2024, Bristol Bay Construction Holdings, LLC, a BBNC holding company, experienced a data breach involving sensitive personal information of an undetermined number of individuals. Separately, Bristol Bay Government Services Group, LLC, a BBNC subsidiary, disclosed a security incident discovered on or around October 19th, 2024, with notification letters sent to affected individuals in May 2025. No specific threat actor attribution or ransomware claims have been reported in connection with the current breach.
Key Facts at a Glance
- Company or Organization: Bristol Bay Native Corporation
- Industry: Alaska Native Regional Corporation / Diversified holding company (government services, oilfield services, construction, petroleum distribution, tourism)
- Location: Anchorage, Alaska
- Incident type: Unauthorized access to personal and financial information
- Date of breach: April 1st, 2026 – April 3rd, 2026
- Date breach discovered: May 20th, 2026
- Total persons affected: 368
- Prior breach: Two related incidents in 2024 — Bristol Bay Construction Holdings, LLC (reported to Massachusetts AG, breach number 2024-712) and Bristol Bay Government Services Group, LLC (incident discovered October 19th, 2024; notifications sent May 2025)
- Litigation status: No class action or litigation connected to this breach has been reported
- Source: Texas Attorney General data security breach report (BR-0005124): https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005124; Bristol Bay Government Services Group security incident notice (PR Newswire): https://www.prnewswire.com/news-releases/bristol-bay-government-services-group-notifies-individuals-of-a-data-security-incident-302466363.html; Bristol Bay Construction Holdings breach investigation (Strauss Borrelli PLLC): https://straussborrelli.com/2024/04/10/bristol-bay-construction-holdings-data-breach-investigation/
What Should You Do?
If you believe you may have been affected by this breach, consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Monitor your bank and credit card statements closely for any unfamiliar charges, and request your free credit reports at AnnualCreditReport.com to check for signs of fraud. If identity theft does occur, the Federal Trade Commission’s resource at IdentityTheft.gov can help you create a personalized recovery plan. Because financial information was exposed in this breach, be especially vigilant for phishing attempts or unauthorized transactions tied to affected accounts.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
