LowBreach / campaignMonitoring

Qilin ransomware group claims BKV Vasúti Jármjavító Kft on its leak site

RansomLook reports the Qilin group listed BKV Vasúti Jármjavító Kft on its leak site; unconfirmed, partners should watch for an official statement.

Published
Exploitation
No, only a ransomware leak-site claim reported by a tracker, not confirmed by the company

What happened

According to the claim tracker RansomLook, the Qilin ransomware group listed BKV Vasúti Jármjavító Kft on its leak site on 2026-11-01. This advisory is based only on that headline because the full entry could not be reviewed.

A listing on a leak site is a claim made by the group. It does not prove that an attack took place. The company has not confirmed any incident in the available sources, and no independent outlet has verified the claim. The following are not confirmed: the entry point, whether data was taken, what kind of data, how much, and any ransom demand or deadline.

Am I affected?

Not confirmed. The sources do not name any affected systems, data, customers or partners. If you have no relationship with BKV Vasúti Jármjavító Kft, you are not affected based on what is currently known.

What to do now

  1. If you are a partner or supplier, look for an official statement from BKV Vasúti Jármjavító Kft before making any assumptions.
  2. Do not download or share files that are said to come from the leak site.
  3. Check back for updates from independent outlets or the company, because this advisory will be revised if new facts appear.

Sources