extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

lockbit3.0 — Chat: *************138292

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 106 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
lockbit3.0
Record date
Date not recorded
Messages
106
Participants
LockBit 3.0, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    [Chat started]

  2. Message 002 From Victim Victim Date

    Hello, do you have my data?

  3. Message 003 From LockBit 3.0 Actor / other Date

    Hi,yes

  4. Message 004 From LockBit 3.0 Actor / other Date

    Your servers have been blocked. We also downloaded 178 GB of critical information in advance, which we will process and distribute to your customers and competitors if you don't comply with our conditions. The amount of your payout is $150...000 in BTC.

  5. Message 005 From Victim Victim Date

    Can you provide a list of the data or a sample

  6. Message 006 From LockBit 3.0 Actor / other Date

    Sure, wait pls

  7. Message 007 From LockBit 3.0 Actor / other Date

    Stay in chat, we will send you the file tree soon...

  8. Message 008 From Victim Victim Date

    Okay

  9. Message 009 From Victim Victim Date

    Is the amount $150,000 dollars?

  10. Message 010 From LockBit 3.0 Actor / other Date

    Apart from the files we downloaded, the rest of your files are encrypted if you haven't figured it out yet.Wait for us.

  11. Message 011 From LockBit 3.0 Actor / other Date

    $150,000, Yes.

  12. Message 012 From Victim Victim Date

    Please send me the file tree.

  13. Message 013 From LockBit 3.0 Actor / other Date

    You can also use the test unlocker of any one file to make sure that you can get your data back.

  14. Message 014 From LockBit 3.0 Actor / other Date

    Okay, wait, you will get file tree.

  15. Message 015 From Victim Victim Date

    Hi are you there?

  16. Message 016 From LockBit 3.0 Actor / other Date

    Yes, Wait a little more.

  17. Message 017 From Victim Victim Date

    Okay

  18. Message 018 From LockBit 3.0 Actor / other Date

    http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/v1UfFE6UTG#IRNh78aAu+Nu+Cs1JZTbKNhPltLyYpVoEstJJ878owc=

  19. Message 019 From LockBit 3.0 Actor / other Date

    This is not all the data that we have on hand.Among them there is a lot of confidential data.

  20. Message 020 From Victim Victim Date

    That is what my boss wants to know. Can you please provide a sample or listing of that data.

  21. Message 021 From LockBit 3.0 Actor / other Date

    We've already exposed some of your data, what else do you need?

  22. Message 022 From Victim Victim Date

    Have you already exposed our data? What site?

  23. Message 023 From Victim Victim Date

    I just want to show my boss why we need to pay.

  24. Message 024 From LockBit 3.0 Actor / other Date

    No. we didn't do that.

  25. Message 025 From LockBit 3.0 Actor / other Date

    http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/v1UfFE6UTG#IRNh78aAu+Nu+Cs1JZTbKNhPltLyYpVoEstJJ878owc=

  26. Message 026 From LockBit 3.0 Actor / other Date

    open the link, there's a list of your files, it's not a complete list

  27. Message 027 From LockBit 3.0 Actor / other Date

    after payment, all your data will be deleted from our server

  28. Message 028 From Victim Victim Date

    Sorry my connection dropped. I will look now.

  29. Message 029 From LockBit 3.0 Actor / other Date

    ok

  30. Message 030 From Victim Victim Date

    We will need time. It is a big holiday here in the US.

  31. Message 031 From Victim Victim Date

    Can you share at least one confidential data file please.

  32. Message 032 From LockBit 3.0 Actor / other Date

    Wait a little while. Selecting a file

  33. Message 033 From LockBit 3.0 Actor / other Date

    File: [Screenshot_2.png]

  34. Message 034 From LockBit 3.0 Actor / other Date

    We did not have much time to study your documents in depth. We are sending you a screenshot of the scanned documents, which also contain confidential information.

  35. Message 035 From LockBit 3.0 Actor / other Date

    And this is just one of the many folders

  36. Message 036 From LockBit 3.0 Actor / other Date

    You can also use the test decryptor to decrypt one of the files. This way you can make sure that you get a fully working server after the payment.

  37. Message 037 From LockBit 3.0 Actor / other Date

    You are also warned that you have 7 days to settle this issue. We will post your files on December 31st. --On shady forums where they can be used by hackers, carders, bank specialists, technology spies, and other specialists. -Send them to all your contacts, customers and partners. After that, in our experience, the business comes to an end and multimillion dollar lawsuits from affected employees, customers and competitors begin. --Competitors. They will be able to find a lot of the information they need from your files. -Controlling government agencies. We doubt you have perfect accounting and record keeping. We look forward to a timely and correct decision on your part.

  38. Message 038 From LockBit 3.0 Actor / other Date

    BTC Wallet 14mwyF23z3NMaWumKcP6P2yEeiZsjFpS7J

  39. Message 039 From Victim Victim Date

    Thank you. We will work on this.

  40. Message 040 From LockBit 3.0 Actor / other Date

    4 days left.

  41. Message 041 From LockBit 3.0 Actor / other Date

    1 day left

  42. Message 042 From Victim Victim Date

    Hello! We are working hard to meet your demands. We need more time. We are trying to setup the wallet an transfer the money. As a professional, you know this takes time and the banks are slow around the holidays. Also, can you please reduce the price a little. We don't have that kind of money.

  43. Message 043 From Victim Victim Date

    Will you tell us how you got in so we can fix the systems?

  44. Message 044 From LockBit 3.0 Actor / other Date

    Hello.

  45. Message 045 From LockBit 3.0 Actor / other Date

    We believe that your business is insured against such situations, and we also don't believe that you can make a BTC wallet for 1.5 weeks and transfer money to it. Further delay will only increase the cost. As for how we got into the system, of course we can tell you, but for a separate fee of $10,000.

  46. Message 046 From Victim Victim Date

    Hello, we do not have insurance and Bitcoin will not allow a transfer that large for a new wallet. We are doing all we can.

  47. Message 047 From LockBit 3.0 Actor / other Date

    We don't see any problems in replenishing the BTC wallet.If you delay the solution of this issue, the price will increase.

  48. Message 048 From LockBit 3.0 Actor / other Date

    We advise to use non-custodial crypto wallets

  49. Message 049 From Victim Victim Date

    We are working on it.

  50. Message 050 From LockBit 3.0 Actor / other Date

    We understand that it was a great holiday in the USA. however, we have been doing this business for a long time and cannot give you much time to solve this problem. Another 2 days, and the price will increase by 50k.

  51. Message 051 From Victim Victim Date

    Thank you. We are working as fast as we can.

  52. Message 052 From Victim Victim Date

    Hi, did you call our office? Someone keeps calling?

  53. Message 053 From Victim Victim Date

    I want to confirm you are now giving us until Jan 15 for 200k. Is that correct?

  54. Message 054 From LockBit 3.0 Actor / other Date

    Hi.

  55. Message 055 From Victim Victim Date

    Hi, did you call our office?

  56. Message 056 From LockBit 3.0 Actor / other Date

    Yes, we call your office.

  57. Message 057 From Victim Victim Date

    I want to confirm you are now giving us until Jan 15 for 200k. Is that correct?

  58. Message 058 From LockBit 3.0 Actor / other Date

    We called to show you our capabilities. The price of 200k will be in 2 days and will only grow with 50k every extra week.

  59. Message 059 From Victim Victim Date

    Thanks.

  60. Message 060 From LockBit 3.0 Actor / other Date

    Now the price is $200.000.

  61. Message 061 From Victim Victim Date

    Hi, You told us you would give us till Jan 15 for 200K. Someone called us today and said the price is now $350.000.00. Why has the price changed?

  62. Message 062 From LockBit 3.0 Actor / other Date

    Hello. We told you that on January 15 our decryptor will stop working and your servers will remain encrypted forever. We didn't promise you anything about a price increase. Your employees made a mistake - the price is not 350.000 but 250.000 and will increase every two days. The next increase of 50,000 will be January 9. This is payment for your slowness. And on January 15 we will begin to publish your confidential information on the shadow forums, as well as send it to your clients, competitors and regulatory agencies in the United States. For now, the solution to the problem is entirely in your hands.

  63. Message 063 From LockBit 3.0 Actor / other Date

    http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/mdmHYFTbYU3oSJ4P63bd7fb7214ee

  64. Message 064 From LockBit 3.0 Actor / other Date

    Your negotiator obviously already got the operating money to solve this situation, but since now there is a slight upward trend in BTC - apparently he wants to make a little more money on this growth. No need to play with us. You have a deadline of January 15. Then we publish and send your data everywhere we can (and we can do a lot). Change the recovery, or pay the final price of $250,000 by January 15.

  65. Message 065 From LockBit 3.0 Actor / other Date

    We are starting to publish and distribute data.

  66. Message 066 From Victim Victim Date

    Hello. I am the new person in charge of talking with you. Can you please provide proof that you have our data. I would like to see some of the acutal files. Once you do that, we can chat about your demands.

  67. Message 067 From LockBit 3.0 Actor / other Date

    Hello, wait

  68. Message 068 From Victim Victim Date

    Hello

  69. Message 069 From LockBit 3.0 Actor / other Date

    You have a lot of confidential data and correspondence. What are your suggestions and options?

  70. Message 070 From LockBit 3.0 Actor / other Date

    Also recall that the spreading of correspondence is punishable by huge fines, as well as administrative penalties up to the liquidation of the company. https://en.wikipedia.org/wiki/Electronic_Communications_Privacy_Act

  71. Message 071 From LockBit 3.0 Actor / other Date

    Hello. Since you are a new person, we will repeat it again for you. We have a huge number of critical files for you. Even a small number of your files will not only put an end to your business and the career of your employees, but will also lead to a large number of lawsuits for the distribution of confidential information of your customers and partners. A bonus for you will be sending all of your documentation (including accounting) - to the relevant regulatory agencies, which will be interested in the fact of the spread of your critical data, and someone may want to take the chance and improve their career. You understand that the law in any country is an extremely subjective thing, which can be turned either in your direction or against you. We have not published your data just because we have a lot of work to do right now, and we are very creative in spreading client information - we want as many people connected with you as possible to know that you have allowed a situation where their finances and safety are in danger due to your fault. We are attaching some screenshots of the most interesting, from our point of view, files. This is not everything, just a small part of what we have. Think about it.

  72. Message 072 From LockBit 3.0 Actor / other Date

    File: [01.PNG]

  73. Message 073 From LockBit 3.0 Actor / other Date

    File: [04.PNG]

  74. Message 074 From LockBit 3.0 Actor / other Date

    File: [06.PNG]

  75. Message 075 From LockBit 3.0 Actor / other Date

    File: [05.PNG]

  76. Message 076 From LockBit 3.0 Actor / other Date

    File: [02.PNG]

  77. Message 077 From LockBit 3.0 Actor / other Date

    File: [08.png]

  78. Message 078 From LockBit 3.0 Actor / other Date

    File: [07.PNG]

  79. Message 079 From Victim Victim Date

    I need a few files so show to my team. Screen shots are not good enough. Also, we will need to know how our systems were compromised.

  80. Message 080 From LockBit 3.0 Actor / other Date

    You can use the instruction and decrypt any 2 files on your own

  81. Message 081 From LockBit 3.0 Actor / other Date

    We will provide any information you are interested in after payment. I think you will be extremely surprised.

  82. Message 082 From Victim Victim Date

    I need to show my executive team actual files not screenshots in order to move forward. Please upload a few files.

  83. Message 083 From LockBit 3.0 Actor / other Date

    Are you in doubt about the availability of your files with us?

  84. Message 084 From LockBit 3.0 Actor / other Date

    File: [September 2018 Statements.pdf]

  85. Message 085 From LockBit 3.0 Actor / other Date

    File: [September 2018 Statements.pdf]

  86. Message 086 From LockBit 3.0 Actor / other Date

    File: [001.PNG]

  87. Message 087 From LockBit 3.0 Actor / other Date

    more?

  88. Message 088 From Victim Victim Date

    Yes please.

  89. Message 089 From LockBit 3.0 Actor / other Date

    We will send you two more files and that will be all. We are waiting for your decision

  90. Message 090 From LockBit 3.0 Actor / other Date

    File: [0006contract-4.pdf]

  91. Message 091 From LockBit 3.0 Actor / other Date

    File: [email list 11'22 PR.xls]

  92. Message 092 From Victim Victim Date

    Thanks we will be in touch.

  93. Message 093 From LockBit 3.0 Actor / other Date

    We hope for your discretion.

  94. Message 094 From LockBit 3.0 Actor / other Date

    Do we understand correctly that your company isn't interested in solving this problem?

  95. Message 095 From Victim Victim Date

    We are, but are still in discussions. We need more time. Thanks

  96. Message 096 From LockBit 3.0 Actor / other Date

    While you are stalling for some reason, we will publish and distribute some of the data. You'll like it. You're welcome.

  97. Message 097 From LockBit 3.0 Actor / other Date

    Let's start with corporate correspondence. Since we have your confidential files, we have access to your correspondence. The first people to receive your shared correspondence are: 1.Anne Vandeveer ABV Retirement Plan Advisors, Inc. anne@abvadvisors.com (855) 550-0228 2.Van Shelton Actuaries & Associates (Amarillo) van@actuariesandassociates.com (806) 373-3624 3.Lorraine Dorsa Aegis Pension Services LDorsa@AegisPension.com (904) 686-1835

  98. Message 098 From LockBit 3.0 Actor / other Date

    Hello. This is the Lockbit team. We see that you relaxed and thought that we had forgotten about you? Don't worry - we have enough time and energy for everyone. Your data is quite interesting because you did all the work for us. For example, the Active Clients folder in the Scanned Client Info folder is just ready to be delivered to your clients, don't you think? How will your life and financial well-being (not to mention your reputation and credibility) change when all the documents are in the public domain? Let's not hide it - we have partners who would love to buy all your data from us. But we want to help you first and save, first of all, the fate of you and your employees. It's not very pleasant to find yourself on the street with huge debts from lawsuits and to be blacklisted by employees who allowed leaks and damage to the businesses of partners who trusted you. You still have the option to settle with us, and we are committed to removing all of your files and pointing out cybersecurity issues. The choice is yours...

  99. Message 099 From LockBit 3.0 Actor / other Date

    Hello. This is Lockbit. We have prepared files that we will send to the people who signed them describing the whole situation and your attitude to their security and trade secrets. We are sending you some of the screenshots for your review. Recipients: Pension Advisory Group, Ltd. -pag@pagltd.com -dennis@pagltd.com -melody@pagltd.com Frost, PLLC -drichardson@frostpllc.com -dcooper@frostpllc.com -erachal@frostpllc.com We will send out tomorrow, so you have 24 hours to go to tor chat and start solving the problem.

  100. Message 100 From LockBit 3.0 Actor / other Date

    File: [1.png]

  101. Message 101 From LockBit 3.0 Actor / other Date

    File: [4.png]

  102. Message 102 From LockBit 3.0 Actor / other Date

    File: [3.png]

  103. Message 103 From LockBit 3.0 Actor / other Date

    File: [2.png]

  104. Message 104 From LockBit 3.0 Actor / other Date

    Hello. Tomorrow it's CJK Group's turn - there are also some documents for them, some of which we will send. Not ready to negotiate yet?

  105. Message 105 From LockBit 3.0 Actor / other Date

    We have plenty of time and materials to send. That's why we don't have to rush. But you will lose more and more clients and partners every day.

  106. Message 106 From LockBit 3.0 Actor / other Date

    Hello. Since you are not responding to messages, we will be sending out messages to your customers for another week, and then we will start publishing these documents on social networks.