extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

lockbit3.0 — Chat: *************B8DC6D

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 78 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
lockbit3.0
Record date
Date not recorded
Messages
78
Participants
LockBit 3.0, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    [Chat started]

  2. Message 002 From LockBit 3.0 Actor / other Date

    Hello! We will keep the publication but without proofs of leak.

  3. Message 003 From LockBit 3.0 Actor / other Date

    If you'll be fast the blog isn't going to be an issue because it just a words in the internet

  4. Message 004 From LockBit 3.0 Actor / other Date

    File: [9.png]

  5. Message 005 From LockBit 3.0 Actor / other Date

    File: [8.png]

  6. Message 006 From LockBit 3.0 Actor / other Date

    File: [10.png]

  7. Message 007 From LockBit 3.0 Actor / other Date

    File: [11.png]

  8. Message 008 From LockBit 3.0 Actor / other Date

    File: [12.png]

  9. Message 009 From LockBit 3.0 Actor / other Date

    You need to hurry up if you want to prevent distribution of these proofs

  10. Message 010 From LockBit 3.0 Actor / other Date

    File: [21.png]

  11. Message 011 From LockBit 3.0 Actor / other Date

    File: [19.png]

  12. Message 012 From LockBit 3.0 Actor / other Date

    File: [20.png]

  13. Message 013 From LockBit 3.0 Actor / other Date

    File: [22.png]

  14. Message 014 From Victim Victim Date

    How does this work? What are you asking for?

  15. Message 015 From LockBit 3.0 Actor / other Date

    You need to pay ransom to keep this incident and data we have confidality

  16. Message 016 From Victim Victim Date

    What is the ransom price?

  17. Message 017 From LockBit 3.0 Actor / other Date

    Price for your company is 15m$.

  18. Message 018 From Victim Victim Date

    We would like to ask you to provide a detailed file listing showing the files you took from our systems. We need the file listing to show a total data size so that we can compare that against the 1.5TB you referenced on your blog. We will also need you to show us what the three database backups were.

  19. Message 019 From LockBit 3.0 Actor / other Date

    File: [filetree.7z]

  20. Message 020 From LockBit 3.0 Actor / other Date

    File: [filetree2.7z]

  21. Message 021 From LockBit 3.0 Actor / other Date

    You can choose up to 5 random files from file tree and we'll send it like a proof.

  22. Message 022 From Victim Victim Date

    Are you able to provide file listings that maintains the file path and shows the file size and total file count and data size of each list?

  23. Message 023 From LockBit 3.0 Actor / other Date

    File: [2.jpg]

  24. Message 024 From LockBit 3.0 Actor / other Date

    File: [1.jpg]

  25. Message 025 From LockBit 3.0 Actor / other Date

    File: [3.jpg]

  26. Message 026 From LockBit 3.0 Actor / other Date

    We cannot provide you more information because it exposes sensitive information

  27. Message 027 From LockBit 3.0 Actor / other Date

    Some files are compressed

  28. Message 028 From Victim Victim Date

    We need transparency if we are going to come to an agreement. Our leadership needs to see a full listing, including the full file paths and data size if we are going to proceed. Because you have not provided a file listing with the details we have asked for, there is a great concern that you may be artificially inflating your statistics.

  29. Message 029 From LockBit 3.0 Actor / other Date

    Ok, wait

  30. Message 030 From LockBit 3.0 Actor / other Date

    File: [data2.7z]

  31. Message 031 From LockBit 3.0 Actor / other Date

    File: [data4.7z]

  32. Message 032 From LockBit 3.0 Actor / other Date

    File: [data5.7z]

  33. Message 033 From LockBit 3.0 Actor / other Date

    File: [data1.1.7z]

  34. Message 034 From LockBit 3.0 Actor / other Date

    File: [data1.2.7z]

  35. Message 035 From LockBit 3.0 Actor / other Date

    File: [data3.7z]

  36. Message 036 From Victim Victim Date

    Thank you for providing the most recent file listings, our leadership will start review this information tomorrow. We will get back to you soon. In the meantime, will you please take the timer off your blog site. We won’t be able to come to an agreement by tomorrow afternoon.

  37. Message 037 From LockBit 3.0 Actor / other Date

    We will add 12 hours.

  38. Message 038 From LockBit 3.0 Actor / other Date

    Any updates?

  39. Message 039 From Victim Victim Date

    Our leadership team is still reviewing the file listings, this is going to take us a couple of days. One question that keeps being asked is, do the file listings you provided include all of the data you took?

  40. Message 040 From LockBit 3.0 Actor / other Date

    You see the timer. Nobody going to wait for you to check every single file from the list. Stay slow and everybody will check the listing with you. Also we have prepared special high speed mirrors for press.

  41. Message 041 From Victim Victim Date

    Yesterday the timer showed 4 extra days. Our leadership team planned on using that time to review the data so that we can prepare a counteroffer. We are still evaluating the data and need to work through this process. If you post the data, then we have no reason to give you an offer. Please return the timer as it was so we can continue our discussions to come to a resolution on this.

  42. Message 042 From LockBit 3.0 Actor / other Date

    You have 48 hours

  43. Message 043 From Victim Victim Date

    We’ve had a chance to perform our review, we want to make sure we’re very transparent with you as we work together to resolve this.

  44. Message 044 From Victim Victim Date

    Based on what we have seen in the list, we are going to have to notify a lot of our clients of this by law. This will cost us a lot of money to do regardless of whether we pay you or not, so we have to account for that. We’d still be willing to pay you so that the data gets deleted, but that price has to be realistic. $15M is not realistic for us.

  45. Message 045 From Victim Victim Date

    Considering what we have available and what we need to spend regardless, we’re willing to pay $500,000 to resolve this with you.

  46. Message 046 From LockBit 3.0 Actor / other Date

    You can pay 15m and nobody will know about what data we have. I don't want to see amounts like 500k or 1-2-3-m$ because its ridiculous for your company size and you'll pay much more if i post your data.

  47. Message 047 From LockBit 3.0 Actor / other Date

    I had a conversation with my boss. Due to our rules we cannot review any unreasonable offers. My boss is provide you a discount so now you can pay $14.5m. Next week it will be 30m$. If you think that it's too much say it now. Consider your responsibility for the clients.

  48. Message 048 From Victim Victim Date

    The size of our company doesn’t matter in this situation, and if you know our finances, then you know we haven’t made a profit in years. What matters is what we can pay and what is realistic for us. Based on what you have shown us and what we have to pay regardless because of our legal obligations, what is realistic for us is $750,000, maybe a little bit more based on what you have shown us. Perhaps you discuss with your boss again to explain the situation and extend the timer while we continue discussing the resolution of this with you.

  49. Message 049 From LockBit 3.0 Actor / other Date

    We do know about your financial situation and we know that you can pay. But I can trust you and provide access to your data for everyone or press only. So may I count on you and wait a little bit more or you going to put me bullshit offers everyday?

  50. Message 050 From Victim Victim Date

    If you make our data public then we have not reason to keep negotiating or make a payment of any amount. The price you are asking is completely beyond our capability to pay and we ask that you re-consider our last offer or provide a number that's more reasonable. Either way, we need more time to figure this all out.

  51. Message 051 From LockBit 3.0 Actor / other Date

    I wont talk with my boss about all offers under 8m$. If you swear me to give me normal offer i can give you extra time.

  52. Message 052 From Victim Victim Date

    We will go back to our leadership team and board to discuss what we can do. Please give us more time, it is going to take us some time to get the appropriate individuals engaged.

  53. Message 053 From LockBit 3.0 Actor / other Date

    Timer is paused until tomorrow. I warn you to stop playing this games with us because our patience is almost done.

  54. Message 054 From Victim Victim Date

    We can bring our offer up to $1,000,000 but this will deplete what funds what we currently have available for a payment.

  55. Message 055 From LockBit 3.0 Actor / other Date

    Read one more time carefully my previous messages. I told you that i don't want to see offers like this. I'm starting to make first steps to destroy your company because you don't want to make a deal with me. You think I'm fool? I have your files and i know how much money you have.

  56. Message 056 From LockBit 3.0 Actor / other Date

    CEO of Sirva knows about this shit offers? He understand how much funds he will loose in all departments around the world after work we'll done?

  57. Message 057 From Victim Victim Date

    Our offer was approved by the leadership team and board, these are the individuals who determined that $1,000,000 is a reasonable and realistic valuation. Your attempt to reach out to or call our people will not influence our position. $1,000,000 is all that we are able to offer at this time and we would like to ask you to review this offer with your boss.

  58. Message 058 From LockBit 3.0 Actor / other Date

    We don't accept your offer. We've been waiting long time for a good offer from you and can't wait anymore. Now we will start working with media by sending them a links with all data of your clients, transactions, taxes, etc. We have collected a lot of data and we will send a it to the tax department, trade unions and more law offices later. We think they will be interested in your activities. We don't want to have a dialogue with you because you're losing our time. Wish you the best luck.

  59. Message 059 From Victim Victim Date

    We have been working in good faith with you to bring this to a realistic resolution. If you move forward and publish or make public any more of our data than we will have no incentive to work with you. We have to believe that $1,000,000 is worth more to you than publishing our information. If you can provide us a more realistic price than we can discuss this in our next leadership meeting that is scheduled for Monday.

  60. Message 060 From Victim Victim Date

    We see that you have re-posted some files. We previously indicated that disclosure of information impacts our incentive to pay.

  61. Message 061 From Victim Victim Date

    We have demonstrated a willingness to pay a realistic amount but you continue to demand an amount that is higher than we can pay, make unnecessary threats and are taking these unnecessary posting actions that cannot change our position. We have told you that we need until Monday to discuss any increased payment. We ask you remove the files, stop your threats and accept a reasonable offer from us.

  62. Message 062 From LockBit 3.0 Actor / other Date

    I told you, next step is calling all you clients. I told that if you don't want to pay us you'll lose more. Stop your shit talk about you don't have funds and so on. I know who you are and what work you need to do and you know that if I'll publish all data from Sirva company you'll get nothing. So you need to talk with Sirva company management and come back with amount which we're asking.

  63. Message 063 From Victim Victim Date

    We’ve been very transparent with you throughout this process. As we said, if you make any additional disclosures of our information, our willingness to pay any amount will be drastically reduced. Republishing our name and original data on the site and continuing to try to contact our leadership or media won’t change our position, and in fact will make us less willing to pay. We are willing to pay a realistic price and come to an agreement with you. $1,000,000 is that price. Let’s close this and both move on with a win.

  64. Message 064 From LockBit 3.0 Actor / other Date

    It could be win for you not for us. Seems you don't want to make a deal.

  65. Message 065 From LockBit 3.0 Actor / other Date

    http://lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion/secret/acc2cf6896c0c9c116ff8c52bda40d0b/sirva.com/

  66. Message 066 From LockBit 3.0 Actor / other Date

    You have 2 days until it will be published. All or nothing.

  67. Message 067 From LockBit 3.0 Actor / other Date

    File: [ALL.JPG]

  68. Message 068 From LockBit 3.0 Actor / other Date

    Here you go. The day after tomorrow, I will send another letter with all your data

  69. Message 069 From Victim Victim Date

    Your continued pressure and threats make it very clear to us that you want to get paid and close this deal. The amount of money you are asking is nowhere near a realistic price to pay for the data you have shown us. We have said this time and time again. Your new threat to notify the media and your continued efforts to threaten our business, our leadership and our customers will not change our valuation of the data and will not influence our position. We have clearly demonstrated the price range we are able to work within. Stop playing your games, wasting our time and let’s close this business deal. give us a price within range of our offer and our leadership team will discuss making a deal.

  70. Message 070 From LockBit 3.0 Actor / other Date

    The price range is between 7,7 and 15 million dollars, I already told you that, did you forget?

  71. Message 071 From Victim Victim Date

    We saw that you originally responded and asked 'What range?' It looks like you have now changed that response which is unfortunate. You should realize by now, the realistic range we are willing to consider is evident by our offer to date. Take this information back to your boss and let’s discuss a price that is more realistic.

  72. Message 072 From LockBit 3.0 Actor / other Date

    Hello, this is boss Lockbit, my partner asked if he can make an additional discount and agree to your miserable pennies, I refused him. The thing is that since October 1, according to the new rules it is strictly forbidden to make a discount of more than 50% of the originally announced redemption amount, so the partner has no right to make a discount on a single dollar even if he wants it very much and believed in your funny fairy tales about your poverty and the last possible price for you $7.500.000. I as the Boss will be very happy to see your information on my blog, your information will be kept there forever. The only way to prevent the leak is to accept my last possible price, otherwise you will not only suffer losses from the leak but will be repeatedly attacked again in the future and will not know in what original way your very profitable and successful company was hacked until now. All the best, you can continue negotiations with my partner.

  73. Message 073 From Victim Victim Date

    I have no way of knowing if the individual who wrote this last message is truly a different person. Everything about this message tells us that you are still interested in making a deal and getting paid. Your original price is unweighted and not realistic. Your “internal rules” about the discount percentage you are able to provide do not apply to us or this situation. That is unfortunately an issue you are going to need to work through internally, come back to us with a resolution if you would like to make this deal. We reiterate, if you publish our data we are done. Your demand is totally out of our range and as a result we will not provide another counteroffer until you give us a more realistic price within our range.

  74. Message 074 From LockBit 3.0 Actor / other Date

    Work on the leak. Correspondence will be attached to the blog post.

  75. Message 075 From Victim Victim Date

    We will need to meet with the leadership team tomorrow

  76. Message 076 From LockBit 3.0 Actor / other Date

    No. You still have 9 hours.

  77. Message 077 From Victim Victim Date

    We will not be able to get approvals to raise our offer tonight. You are going to need to wait until tomorrow.

  78. Message 078 From LockBit 3.0 Actor / other Date

    No. You already had a lot of time which you wasted so hurry up.