Ransomware group payload hits JOH Investments Limited
JOH Investments Limited — a financial services target operating in JM has been listed by the payload ransomware group on 2026-04-20. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | JOH Investments Limited |
|---|---|
| Threat Group | payload |
| Summary | JOH Investments Limited is an officially registered financial entity based in Kingston, Jamaica, holding an active Legal Entity Identifier (LEI) for international operations. The company specializes in investment activities and asset management, maintaining integration with global banking systems for financial transactions. |
| Date of Breach | 2026-04-20 |
| Discovery Date | 2026-04-20 |
| Region | JM |
| Target Domain | myjohgroup.com |
| Business Sector | Financial Services |
| Severity | MEDIUM |
| Data Size | 30 GB |
Claim by payload
JOH Investments Limited is an officially registered financial entity based in Kingston, Jamaica, holding an active Legal Entity Identifier (LEI) for international operations. The company specializes in investment activities and asset management, maintaining integration with global banking systems for financial transactions.
Posted by the payload threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
myjohgroup.com
Leak post (onion / Tor)
http://payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion/posts/30db07c6-741c-401d-acc1-60b2f60bcfd9
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.