Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Inactive · #122 by victimsRansomware group

J

As of Oct 19, 2026, J has listed 38 confirmed victims on its leak site since Feb 17, 2025, 0.1% of all victims tracked by Brandefense. Its most targeted country is United States (15.8% of its victims) and its most targeted sector is Consulting.

J is an emerging ransomware group that launched its leak site in May 2025, claiming over 41 victims by late 2025 including FAI Aviation Group (Germany), operating primarily as a leak-site-centric extortion identity with limited public technical analysis.

Also known asj ransomware
Is My Company Listed?Follow JRequest IOC FeedTTPs, CVEs and malware →

Follow and IOC feeds are part of the Brandefense platform.

Confirmed Victims
38
Rank By Victims
#122
Last Leak-Site Post
Nov 1, 2025
Top Country
United States
Top Sector
Consulting

Victims Posted Per Month.

J confirmed victims per month
MonthConfirmed victims
November 20251
December 20250
January 20260
February 20260
March 20260
April 20260
May 20260
June 20260
July 20260
August 20260
September 20260
October 2026 (month in progress)0
Updated continuously · figures as of Oct 19, 2026

Latest J Victims.

Search all 38 →
Latest confirmed leak-site victims claimed by J
VictimCountryIndustryData claimedPosted
ikad.com.au - A 5-Month Staycation in the Defense Supply Chain
ikad.com.au
AUAustraliaUnknownNot stated
Dimensional Control Systems (3dcs.com)
3dcs.com
USUnited StatesUnknown11 GB
multi-media systeme AG (mmsag.de)
mmsag.de
DEGermanyUnknown187 GB
AZpro Group (azprogroup.com)
azprogroup.com
USUnited StatesUnknown198 KB
Petro-Diamond (petrodiamond.com) - subsidiary of Mitsubishi Corporation
petrodiamond.com
JPJapanUnknownNot stated
raimore.com
raimore.com
JPJapanUnknown15 GB

How They Operate.

J's threat actor profile lists 1 malware and tools, with its targets and related actors.

TTPs, CVEs and malware →

Who J Targets.

Shares are of this group's confirmed victims.

History.


  1. First confirmed victim listed on its leak site

  2. Busiest month on record: 7 confirmed victims

  3. First seen in Brandefense data

  4. Most recent leak-site post

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.