Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

bahnlog.com

bahnlog.com
Group Incransom
Discovered 2025-03-29 19:34 UTC
Est. attack date 2025-02-26
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

BahnLog is a railway transport company (EVU) and a railway infrastructure company (EIU). The EIU operates public railway infrastructure, public service facilities, and takes over private railway infrastructure. The logistics company has been a partner and service provider for the railway since 2002. The Homburg/Saar track maintenance yard is the only remaining of six former track maintenance yards in Saarland. From here, railway construction sites throughout the Greater Region are served. ===> Phone Number: +49 [REDACTED]-189 78 60 Revenue: $6 Million Employees: 25 Data:72gb Contact: Bahnlogistik und Service GmbH Tel.: +49 [REDACTED]-189 78 60 Reiner Schwarz 06841-189 7873 Christina Naumann 06841/1897860 068411897863 Daniel MüllerD-66459 Kirkel Tel: +49 [REDACTED] Peer Hanson Tel +49 (0) 6841-189 7869 Mobil +49 (0) 172 – 6199 056 Sabrina Linnenbach Tel +49 (0) 6841-189 78 87 Mobil: +491635576604 Jörg Michael Fries 06825 9703703 Fr.Naumann 06841/1897873 Thomas Bergmann 068411897863 buch haltung 06841/18978-64 J.M: Fries [REDACTED]@bahnlog.copm 06841 1897-867 / -882 N. Sefrin [REDACTED]@bahnlog.com 06841 1897-869 /-883 !!!_Data publication in 3 days_!!!

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • bahnloghjp.de
  • domain-abuseinternetx.com
MX Records
  • mx1.bahnlog.com.
TXT Records
  • v=spf1 include:_spf.manitu.net mx:mx1.bahnlog.com IP4:217.11.48.80 ip6:2a00:1828:1000:1105::2 ~all
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.