STNet: unauthorized access to the dedicated network of its cloud server service may have leaked personal data of 20,846 corporate and organizational contacts

1. 2025-11-21

   It announced unauthorized access to the dedicated network used to build and operate its ST cloud server service. It said personal data of contacts at customer organizations and system-related data such as IDs and passwords may have leaked. [1]

2. 2026-01-21

   It published the results of its internal investigation. The intruder got in using a remote access configuration file stored on a server in the network. [2] [3]

After checking all files on the file server (about 440,000), the company found personal data of 20,846 contacts that may have leaked: company names, names and email addresses, and for some contacts phone numbers and dates of birth. No secondary harm has been confirmed. [2]

Organizations whose system information may have leaked were contacted individually. The company says its network checks are all complete and its services run safely. [2]