STS Aviation Data Breach Exposes Financial and Medical Data

STS Aviation Group, a global aviation services company founded in 1984 and headquartered in Jensen Beach, Florida, disclosed a data breach involving unauthorized access to its computer systems.

The breach was disclosed to attorneys general in California, Massachusetts and Vermont on Oct. 19, 2026. STS Aviation Group began notifying affected individuals on Oct. 19, 2026. The incident has so far impacted 319 Massachusetts residents.

On or around Aug. 5, 2025, an unauthorized third party gained access to certain STS Aviation Group computer systems. After discovering the incident, the company began working to determine the full scope of the breach and identify which individuals were affected.

On Sept. 19, 2026, the company determined that the unauthorized party had obtained personal information belonging to affected individuals.

The types of information exposed included names, contact information (such as phone numbers, email addresses and postal addresses), dates of birth, government identification documents and numbers (such as Social Security numbers, driver's license numbers and passport numbers) and login credentials, financial account information and payment card details, medical information, health insurance information, fingerprints, race and ethnicity, and work-related information such as salary, evaluations and worker's compensation claims.

STS Aviation Group's response to the breach

STS Aviation Group is offering affected individuals two years of free identity protection and credit monitoring services through Experian IdentityWorks.

Affected individuals can enroll by visiting the Experian IdentityWorks enrollment page and entering the unique activation code included in their notification letter. The deadline to enroll is Jan. 29, 2027.

Individuals with questions can contact the company's dedicated response line at 833-918-7674, available Monday through Friday from 8 a.m. to 8 p.m. Central Time.