STS Aviation Group: personal data obtained in intrusion
An intrusion around August 5, 2025 let an unauthorised third party obtain personal data including names, contacts and dates of birth.
依企業、國家、產業、發生年份和攻擊方式查詢事件,了解外洩資料、影響範圍、查證狀態、企業應對及來源。
An intrusion around August 5, 2025 let an unauthorised third party obtain personal data including names, contacts and dates of birth.
An unauthorised party accessed the network and acquired files containing personal information.
On August 24, 2026, a file with patient information was inadvertently emailed to another patient; it may include service dates, providers and billing details.
An unauthorised party accessed and acquired information including mortgage origination, underwriting and closing files on September 8–9, 2026.
Suspicious activity affected the network between April 12 and 14, 2026; names and other personal data may be impacted.
An unauthorised actor gained access to the network environment, affecting personal information.
Unauthorised activity was identified August 28, 2026 and on August 30 files and folders were confirmed copied or downloaded.
An unauthorised actor accessed systems May 22–24, 2025 and copied files.
A Metabase vulnerability was exploited and a copy of some patient data was obtained between August 9 and 12, 2026; it may include names, health-plan details, dates of birth and health information.
Information in the network may have been accessed or downloaded without authorisation around June 19, 2026.
A September 4, 2025 network intrusion affected names and, where provided, SSNs, driver’s licence or state ID and passport numbers.
On August 31, 2026, one attorney fell victim to sophisticated social engineering, resulting in certain documents being disclosed to an unknown third party.
An employee email account was accessed by an unknown individual on August 22–23, 2026; personal information in the account may have been affected.
Unauthorised network access was identified around March 27, 2026; potentially impacted files contained personal data.
Between June 30 and August 20, 2026, a third party used personal data obtained elsewhere to generate auto-insurance quotes and may have acquired driver’s licence numbers in the process.
Unauthorised network access on September 4–5, 2026 resulted in names and other data being exfiltrated.
On September 3, 2026, unauthorised access to a system via the Metabase vulnerability may have exposed personal information.
Information may have been accessed and copied without authorisation between June 1 and July 18, 2026.
On August 28, 2026, Buchalter learned a limited amount of its data was subject to unauthorised acquisition, including information relating to San Bernardino County matters.
Unauthorised activity was identified October 18, 2025; members’ data was among potentially impacted data.