People who received STS Aviation Group’s October 2026 data breach notice may be covered by lawsuits filed in Florida federal court over an August 2025 cyberattack that the aircraft maintenance company says exposed Social Security numbers, fingerprints and medical information. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes lawsuits filed against STS Aviation Group, LLC. Any claims in them are unproven allegations. STS Aviation Group has not been found liable, there is no certified class, and there is nothing to claim at this time. This page is informational and is not legal advice.
What Is This About?
STS Aviation Group, an aircraft maintenance, repair and overhaul company with operations in South Florida, began mailing data breach notices on October 19, 2026. The letters say an unauthorized party got into certain company systems on or around August 5, 2025, and that the intruder obtained personal information that, depending on the person, included Social Security numbers, passport and driver’s license numbers, fingerprints, medical and health insurance information, and payment card data.The first lawsuit against STS Aviation Group, LLC was filed in the U.S. District Court for the Southern District of Florida three days later, on October 22, 2026. By October 28, federal court records showed at least seven separate cases against the company in the court’s Fort Pierce division. None has been certified as a class action, STS has not filed a response in any of them, and there is no settlement or claim form.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What STS Aviation Group’s Notice Says
STS Aviation Group filed a sample of its notice letter with the California Attorney General, which posted it on October 19, 2026. The letter, signed by the company’s general counsel, lays out this timeline:- On or around August 5, 2025, an unauthorized party accessed certain STS Aviation Group systems.
- On September 12, 2025, STS identified the incident and began an investigation with outside cybersecurity experts.
- On September 19, 2026, STS determined that an unauthorized third party had obtained personal information.
- On October 19, 2026, STS dated the notice letters sent to affected people.
STS says it blocked the unauthorized party’s access, added safeguards and reported the incident to law enforcement. The letter does not say how many people were affected, and the California listing does not give a total. The company has not publicly identified the attacker.
The letters went out about 13 months after STS says it first identified the incident, and roughly a month after it says it confirmed that personal information had been taken.
What Information Was Exposed
The notice says the types of information involved varied from person to person and that not every category applies to everyone. The categories it lists are:- Names and contact information, including phone numbers, email addresses and postal addresses
- Dates of birth
- Government identification documents and numbers, including Social Security, driver’s license and passport numbers
- Financial account data, including payment card information
- Medical and health insurance information
- Fingerprints
- Race and ethnicity
- Work-related information, including salary, evaluations and workers’ compensation claims
Fingerprints stand out on that list. Unlike a card number or a password, a fingerprint cannot be reissued once it is exposed. The work-related categories, such as salary and performance evaluations, are the kind of records an employer keeps on its staff.
The letter offers two years of Experian IdentityWorks identity protection and credit monitoring at no cost. The sample filed in California lists an enrollment deadline of January 29, 2027, using the activation code printed in each person’s letter.
The Lawsuits Filed So Far
Federal court records list nine new docket numbers naming STS Aviation Group, LLC as defendant in the Southern District of Florida between October 22 and October 28, 2026. Two of them (Nos. 2:26-cv-14438 and 2:26-cv-14440) carry only a clerk’s docket-correction notice and appear to have been reopened under new numbers, which leaves at least seven separate cases:- No. 2:26-cv-14425, filed October 22, 2026
- No. 2:26-cv-14428, filed October 26, 2026
- No. 2:26-cv-14433, filed October 26, 2026
- No. 2:26-cv-14436, filed October 27, 2026
- No. 2:26-cv-14439, filed October 27, 2026
- No. 2:26-cv-14441, filed October 27, 2026
- No. 2:26-cv-14442, filed October 28, 2026
Each case was opened within nine days of the October 19 notice letters. As of October 28, the complaints had not been posted to the free federal court archive, so the specific legal claims in each suit, the damages sought and the class each plaintiff proposes to represent were not yet available for review. Data breach suits of this kind commonly assert negligence and related claims and ask to proceed on behalf of everyone who received a notice, but what these plaintiffs allege will be clear only once the complaints are public.
STS Aviation Group has not responded to the lawsuits in court. When several cases over the same incident land in one federal court, they are often consolidated before a single judge, with one amended complaint replacing the individual filings.
An Earlier STS Aviation Breach Already Settled
This is not the first data breach case against the company. A separate class action, Anderson v. STS Aviation Group, LLC, No. 25000987CAAXMX in the Circuit Court of Martin County, Florida, concerned a cyberattack on STS Aviation’s systems in November 2023 that the settlement website says involved names, Social Security numbers, driver’s license information and passport information. STS denied wrongdoing and agreed to settle. Claims in that settlement closed on May 14, 2026, and the settlement website listed a final approval hearing for June 3, 2026.The 2023 settlement does not cover the August 2025 incident. The notices mailed in October 2026 concern a different breach, and the new federal lawsuits are at the earliest stage.
What Happens Next
STS Aviation Group will be served with the complaints and will have a set period to answer or move to dismiss. If the cases are consolidated, the court may appoint interim lead counsel for the proposed class before any ruling on the merits. A settlement, if one comes, would need court approval and would come with its own notice, claim form and deadline. No such settlement exists today.Questions
Is there an STS Aviation Group data breach settlement for the 2025 attack?
No. The lawsuits over the August 2025 incident were filed between October 22 and October 28, 2026. No class has been certified, no settlement has been announced and there is no claim form. A separate settlement over an earlier, November 2023 STS Aviation incident closed to claims on May 14, 2026.
What information was exposed in the STS Aviation Group breach?
According to STS Aviation Group’s notice letter, the information varied by person and included names, contact details, dates of birth, Social Security, driver’s license and passport numbers and identification documents, payment card and other financial account data, medical and health insurance information, fingerprints, race and ethnicity, and work-related records such as salary, evaluations and workers’ compensation claims.
When did the STS Aviation Group data breach happen?
STS Aviation Group says an unauthorized party accessed certain of its systems on or around August 5, 2025, and that it identified the incident on September 12, 2025. The company says it determined on September 19, 2026 that personal information had been obtained, and it dated its notice letters October 19, 2026.
What did STS Aviation Group offer people who received the notice?
The notice letter offers two years of Experian IdentityWorks identity protection and credit monitoring at no cost. The sample letter filed with the California Attorney General gives an enrollment deadline of January 29, 2027, using the activation code printed in each letter.
Sources
• California Attorney General: STS Aviation Group data breach listing (posted October 19, 2026) and sample notice letter (PDF).• Sloginski v. STS Aviation Group, LLC, No. 2:26-cv-14425 (S.D. Fla., filed October 22, 2026): CourtListener docket.
• Hagen v. STS Aviation Group, LLC, No. 2:26-cv-14428 (S.D. Fla., filed October 26, 2026): CourtListener docket.
• Pinkins v. STS Aviation Group, LLC, No. 2:26-cv-14433 (S.D. Fla., filed October 26, 2026): CourtListener docket.
• Brown v. STS Aviation Group, LLC, No. 2:26-cv-14436 (S.D. Fla., filed October 27, 2026): CourtListener docket.
• Montoya v. STS Aviation Group, LLC, No. 2:26-cv-14439 (S.D. Fla., filed October 27, 2026): CourtListener docket.
• Promaphile v. STS Aviation Group, LLC, No. 2:26-cv-14441 (S.D. Fla., filed October 27, 2026): CourtListener docket.
• Glusing v. STS Aviation Group, LLC, No. 2:26-cv-14442 (S.D. Fla., filed October 28, 2026): CourtListener docket.
• Anderson v. STS Aviation Group, LLC, No. 25000987CAAXMX (Fla. Cir. Ct., Martin County): official settlement website (2023 incident).
• STS Aviation Group: company website.
