On August 28, 2024, TJS.com appeared on the leak site operated by the killsec Ransomware Group. The listing states that internal files were exfiltrated during a ransomware attack on the company, which provides RFID inventory systems and cloud-based point-of-sale software to diamond and jewelry businesses. Anyone whose information is contained in those files — customers, suppliers, or employees — now faces the possibility that their data has been stolen and may be published or sold.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 582 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
Details from the Leak-Site Listing
The killsec post states that internal files were exfiltrated after the group deployed ransomware against TJS. The listing does not disclose the exact number of records involved, the specific types of documents taken, or any ransom demand. It simply states that data was obtained and gives the company a short window to negotiate before samples or the full archive are released. Public views of the onion site show a typical extortion page with a countdown timer and contact instructions, consistent with the group’s standard format.
Why This Matters for You and Your Family
If you have purchased jewelry, had items appraised, or worked with a jeweler that uses TJS’s RFID tagging or cloud POS platform, your personal details may be among the stolen files. That could include names, addresses, phone numbers, email accounts, payment records, or transaction histories tied to high-value items. For families, this exposure creates immediate risks: identity thieves can use accurate address and contact data to craft convincing phishing messages, while fraudsters may target stored payment methods or attempt warranty and insurance scams. Even when the exact contents remain unknown, the fact that internal business files were taken means the breach touches real people who trusted the company with sensitive commercial and personal information.
Doxxing and Identity-Chain Risks
Stolen internal files often contain more than names and addresses. They can link email accounts to phone numbers, customer IDs to physical locations, and business contacts to personal identities. Threat actors routinely chain this information with data from earlier breaches to build detailed profiles. A single leaked jewelry purchase record can expose your home address, which then ties to your children’s school records, social-media handles, or family gaming accounts. Once attackers control one account, they can reset passwords elsewhere, harvest more data, and escalate to full identity theft or extortion. Credential leaks like this one cascade into account takeovers that affect both adult and children’s profiles across gaming platforms and social networks.