extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

lockbit3.0 — Chat: *************D81BF2

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 20 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
lockbit3.0
Record date
Date not recorded
Messages
20
Participants
LockBit 3.0, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    [Chat started]

  2. Message 002 From Victim Victim Date

    Good morning, you encrypted some of our machines.

  3. Message 003 From LockBit 3.0 Actor / other Date

    Hello, you pay - we give you decryptor.

  4. Message 004 From Victim Victim Date

    What about our data?

  5. Message 005 From LockBit 3.0 Actor / other Date

    after payment you will receive a decryptor and all copies of the data will be deleted from our servers

  6. Message 006 From Victim Victim Date

    what did you steal? and what amount of money are you looking for?

  7. Message 007 From LockBit 3.0 Actor / other Date

    we copy 30Gb data. file listing only after payment. Price for yoour company is 400k USD in Bitcoin or 380k USD in Monero

  8. Message 008 From Victim Victim Date

    Why would we believe you without any proof? At first you only mentioned teh decryptor.

  9. Message 009 From LockBit 3.0 Actor / other Date

    You think I didn't take anything from your network? Why do you need proof if your files are encrypted? Obviously, I took the files when I was a guest at your place.

  10. Message 010 From LockBit 3.0 Actor / other Date

    File: [1.png]

  11. Message 011 From LockBit 3.0 Actor / other Date

    File: [2.png]

  12. Message 012 From LockBit 3.0 Actor / other Date

    File: [3.png]

  13. Message 013 From LockBit 3.0 Actor / other Date

    File: [4.png]

  14. Message 014 From Victim Victim Date

    Ok we checked with the people who know that data. That is not critical. And I saw, that you deleted the decryptor, so you can't decrypt anymore?

  15. Message 015 From LockBit 3.0 Actor / other Date

    Decryptor will delete at - 2023-03-16 22:04:06

  16. Message 016 From LockBit 3.0 Actor / other Date

    Decryptor not deleted.

  17. Message 017 From Victim Victim Date

    Now it shows correctly. Thanks. So to be frank. The encryption is not really an issue. The lost data might be. However, as I said, the data above is not critical. Management will need something better.

  18. Message 018 From LockBit 3.0 Actor / other Date

    Ok, we will be prepare your database for public

  19. Message 019 From LockBit 3.0 Actor / other Date

    your data is huge. the screenshots above are examples of random files. but what will be critical for you - may be in the total volume of data. Are we going to negotiate further?

  20. Message 020 From LockBit 3.0 Actor / other Date

    http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/pBI4qxYrgfRwnYPN63d679e4254be