2025 STS Aviation Group — unauthorised system access; SSNs, passports, financial, medical and fingerprint data (determined Sep 19, 2026)
Data compromised
Varies by person: name, contact details, date of birth, government identification (Social Security, driver’s licence and passport numbers), payment card and financial account data, medical and health insurance information, fingerprints, race and ethnicity, and work-related information such as salary, evaluations and workers’ compensation claims.
Technical writeup
Individual notice filed with the California Attorney General on Oct 19, 2026. The incident occurred on or about Aug 5, 2025, was identified Sep 12, 2025, and the impact review concluded Sep 19, 2026, a delay of about a year between identification and notification. The data categories are unusually wide for an aviation staffing firm, which makes the notice worth reading closely. recordsAffected 0 (count not listed).
Root cause
Unauthorised access to certain company systems. STS identified the issue Sep 12, 2025; its investigation determined on Sep 19, 2026 that an unauthorised third party had obtained personal information.