J.E.T.S. Limited · Breach

[Single source] INC Ransom claims attack on Jamaican payment operator J.E.T.S.

· 1 min read

INC Ransom listed J.E.T.S., the Jamaican operator of the MultiLink network and ACH payment switch, on its leak site. The Bank of Jamaica had previously disclosed an incident in which accessed files may have exposed historical debit card numbers and ACH recipient names.

WhatsApp LinkedIn X
MediumBreachNo software to update

What happened

DailyDarkWeb
Observed

A Bank of Jamaica source record points to an official statement concerning a cyber incident at JETS Limited.boj.org.jmboj.org.jm · rssOpen original sourceSee in source listDailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Alleged

DailyDarkWeb later reported that INC Ransom had named J.E.T.S., the Kingston company operating Jamaica's MultiLink debit-card network and ACH payment switch, on the group's leak site.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Why it matters

Inferred

Because J.E.T.S. supports debit-card and bank-transfer infrastructure, exposure of customer information could make convincing phishing, impersonation and payment-related scams easier, even if the most sensitive card credentials were not obtained.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

What to do

Inferred

Customers should treat unexpected calls, texts or emails claiming to come from a bank, J.E.T.S. or the Bank of Jamaica with caution. Do not disclose credentials or approve payments through unsolicited links, and verify requests through an institution's official contact channels.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Confirmed and still uncertain

Observed

The supplied evidence supports that a cyber incident was publicly addressed and that an INC attribution claim is circulating. It does not include a statement from J.E.T.S. identifying the attacker, a sample of allegedly stolen files, or a disclosed data volume from INC.boj.org.jmboj.org.jm · rssOpen original sourceSee in source listDailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

What people are saying

Observed

DailyDarkWeb explicitly described the incident as confirmed but INC's role and alleged data holdings as unverified. It also warned that any eventual leak could increase the risk of card and banking scams in Jamaica.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Evolution

Alleged

According to DailyDarkWeb, the chain began with the Bank of Jamaica's October 23 disclosure about the JETS incident. INC's alleged leak-site listing appeared afterward, adding a possible attribution without proving who conducted the intrusion.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source listboj.org.jmboj.org.jm · rssOpen original sourceSee in source list

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Alleged

DailyDarkWeb says the files accessed may have contained some historical debit-card numbers and names of certain ACH transfer recipients. It reports that PINs, CVVs and card expiry dates were not affected, although the underlying Bank of Jamaica statement text was not included in the supplied batch.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source listboj.org.jmboj.org.jm · rssOpen original sourceSee in source list

Sources and evidence

Observed

The evidence consists of an official Bank of Jamaica page record with no body text in the batch and one DailyDarkWeb post summarizing the incident and INC's claim. No J.E.T.S. response, INC leak-page capture, forensic report or exposed-data sample was provided, so attribution and the alleged data theft remain unverified.boj.org.jmboj.org.jm · rssOpen original sourceSee in source listDailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Sources

  1. boj.org.jmboj.org.jm · rss
  2. DailyDarkWebx.com · DailyDarkWeb · x

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click