Almeida Law Group is investigating a data breach at STS Aviation Group. The breach occurred on August 5th, 2025. If you were affected, contact Almeida Law Group.
About STS Aviation Group
STS Aviation Group is a global aviation services company founded in 1984 and headquartered in Jensen Beach, Florida, with facilities in the United States, United Kingdom, Ireland, France, and the Bahamas. The company provides aircraft maintenance, repair, and overhaul (MRO), engineering solutions, component sales and distribution, workforce management and staffing, line maintenance, hose manufacturing, and aircraft modification services to the commercial aviation and defense industries. It serves airlines, aircraft lessors, cargo operators, and military organizations worldwide. In October 2024, H.I.G. Capital completed a strategic equity investment in the company.
What Happened?
STS Aviation Group was listed in a California Attorney General sample breach notice filed on October 19th, 2026. According to the company’s own notice, unauthorized access to its systems occurred on or around August 5th, 2025, and was identified on September 12th, 2025. However, the company did not determine that personal information had actually been obtained until September 19th, 2026—more than thirteen months after the intrusion and more than twelve months after detection. Consumer notification letters were sent on October 19th, 2026.
The breach exposed a broad range of personal information, which varied by individual. Affected data types included names, contact information (phone numbers, email and postal addresses), dates of birth, government identification documents and numbers (Social Security, driver’s license, and passport numbers), financial account data (including payment card information), medical and health insurance information, fingerprints, race and ethnicity, and work-related information such as salary, performance evaluations, and workers’ compensation claims. The company states it engaged external cybersecurity experts, blocked the unauthorized party’s access, enhanced its safeguards, and reported the incident to law enforcement. Two years of Experian IdentityWorks identity protection and credit monitoring are being offered at no cost to affected individuals, with an enrollment deadline of January 29th, 2027.
This is STS Aviation Group’s second publicly known breach. The company experienced a prior cyberattack in November 2023 that resulted in a class action lawsuit, Anderson v. STS Aviation Group, LLC (Case No. 25000987CAAXMX, Circuit Court of Martin County, Florida), and a settlement with a $350,000 fund capped at up to $4,680 per class member. Bloomberg Law reported that the November 2023 incident was characterized in litigation as a ransomware attack, though no specific threat actor was publicly named. A related federal lawsuit (Anderson v. STS Aviation Group, LLC, 2:2024cv14201, U.S. District Court for the Southern District of Florida) saw negligence and breach of implied contract claims survive a motion to dismiss as of May 2025. No class action litigation has been reported as of the research date in connection with the current August 2025 breach.
Key Facts at a Glance
- Company or Organization: STS Aviation Group
- Industry: Aviation and Aerospace Services (MRO, staffing, component distribution, engineering)
- Location: Jensen Beach, Florida (with facilities worldwide)
- Incident type: Unauthorized access to company systems
- Date of breach: August 5th, 2025
- Date breach discovered: September 12th, 2025
- Date of consumer notification: October 19th, 2026
- Identity theft protection offered: Two years of Experian IdentityWorks credit monitoring and identity protection at no cost
- Enrollment deadline: January 29th, 2027
- Prior breach: November 2023 cyberattack (described in litigation as ransomware); resulted in class action settlement
- Litigation status: Prior breach settled (Anderson v. STS Aviation Group, LLC; claim deadline May 14th, 2026); no litigation reported for current breach
- Source: California Attorney General – Data Breach Report; California Attorney General – Sample Breach Notice; Bloomberg Law – Prior Breach Reporting; ClaimDepot – Class Action Settlement Details; H.I.G. Capital – Investment Announcement
What Should You Do?
If you received a notice from STS Aviation Group, you should enroll in the two years of free Experian IdentityWorks identity protection and credit monitoring before the January 29th, 2027 deadline. You should also place a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—to help prevent unauthorized accounts from being opened in your name. Request your free annual credit reports at AnnualCreditReport.com and review them carefully for unfamiliar accounts or inquiries. Monitor your financial account statements for any unauthorized transactions. Because medical and health insurance information was among the data types involved, you should also review any Explanation of Benefits statements from your health insurer and check your medical records for services you did not receive. If you suspect your information has been misused, visit IdentityTheft.gov for step-by-step guidance on reporting and recovery.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
