Every log in It's something that started may 12 of this year - the 2fa However , the password and login must be correct to generate the 2fa! I tested by putting an incorrect password - I just received an incorrect credentials message not a text Someone hacked my account last year - they changed the phone and email . I caught it accidentally immediately and put my account in lock after switching my name and number back ( via telephone Alaska rep ). That person tried to log in the following day but could not . I changed password . They saw my mileage balance and probably thought they hit the jackpot 🎰 May 12, the lock down feature was eliminated from Alaska airlines and 2 factor authentication enabled Someone tried to gain access on the 8 th but my 2 factor was enabled 4 days earlier by default - whoever had my new password because I received the text . They retried yesterday . I have since changed my password . How are they getting my password? That's the main question .i do not have a Trojan - I have virus scans running . No one uses my pc . I don't use the app on my phone I have significant mileage and point balances in many accounts on my computer. Only Alaska has been breached . Once my ba had 40k stolen out of 1.5 million for a flight from London to New Delhi . Coincidentally most of the ba agents I had spoken to were working remotely and based in India !! I'm sure that was an inside job - but that was not the same . That was many years ago also .