extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

lockbit3.0 — Chat: *************D530E1

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 52 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
lockbit3.0
Record date
Date not recorded
Messages
52
Participants
LockBit 3.0, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    [Chat started]

  2. Message 002 From Victim Victim Date

    We found your note and it brought us here. What is it that you want from us?

  3. Message 003 From LockBit 3.0 Actor / other Date

    Hello, you need pay.

  4. Message 004 From LockBit 3.0 Actor / other Date

    Also we downloaded a lot of information from you.And so far we haven't published anything.There is no mention of an attack.

  5. Message 005 From LockBit 3.0 Actor / other Date

    soon we will send you a tree of stolen data

  6. Message 006 From LockBit 3.0 Actor / other Date

    http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/0qK6DWBg3K#v/KeLYCg94vg15mVB8luf3ze+CN71QoIK6qwFdJ4Chw=

  7. Message 007 From LockBit 3.0 Actor / other Date

    password Y$aP2bsG6vO6oS@C$ISV$FfAo

  8. Message 008 From Victim Victim Date

    We are a small company so please give us time to go over the list. And what exactly do we need to pay?

  9. Message 009 From LockBit 3.0 Actor / other Date

    So why do you start negotiations with lies. We know exactly what kind of company you are. How much money you make, how many employees you have, computers, and so on. The ransom price is always fair. $4,000,000

  10. Message 010 From LockBit 3.0 Actor / other Date

    I want to warn you right away. If you don't actively negotiate, and you drag it out, your name will quickly end up on our blog

  11. Message 011 From Victim Victim Date

    $4,000,000 is a ton of money, were are going to have to discuss with the team on what we can do here so please be patient while we try to figure that out.

  12. Message 012 From LockBit 3.0 Actor / other Date

    Okay. We'll wait.

  13. Message 013 From Victim Victim Date

    We've had a chance to discuss and review this internally. We're not starting anything with lies, and we have no intention of dragging anything out. We also want a quick resolution here, but $4,000,000 is an unrealistic amount for us. We can offer you $200,000, which to us is a lot of money. Would this be enough to get your help here? We don't even know if you can restore our files.

  14. Message 014 From LockBit 3.0 Actor / other Date

    We are guaranteed to decrypt all your files.You can also use the decryption test.Our reputation is impeccable!But your offer is not serious.We will not accept it

  15. Message 015 From Victim Victim Date

    We are doing all the work we can and $200,000 is serious money for us. We don't deal with this sort of thing day in and day out like your group may, but we are still hopeful that we can work something out. To that end we would like to ask if you could come down off of your price.

  16. Message 016 From LockBit 3.0 Actor / other Date

    Okay. $3,800,000

  17. Message 017 From Victim Victim Date

    We're going to need a few days to meet and discuss what we may have available because we can't pay anywhere near the $3.8M you're asking for. Like we said, we're hopeful that we can work something out but we're still trying to process the amount you have asked for. We'll provide an update either Monday or Tuesday.

  18. Message 018 From LockBit 3.0 Actor / other Date

    ok

  19. Message 019 From Victim Victim Date

    We've spent the weekend combing our finances and we would like to tell you that we can't afford $3.8 million dollars, however we would like to pursue a deal. We have been able to make $300,000 available. We hope you consider our offer because it represents our current financial capabilities

  20. Message 020 From LockBit 3.0 Actor / other Date

    3700000$

  21. Message 021 From Victim Victim Date

    We understand that you want paid and appreciate you reducing your price but what you are asking is still far away from what we can offer you. We have worked hard on freeing up additional funds and we can increase our offer to $350,000.

  22. Message 022 From LockBit 3.0 Actor / other Date

    3650000$

  23. Message 023 From LockBit 3.0 Actor / other Date

    time to pay

  24. Message 024 From Victim Victim Date

    We simply cant pay what you're asking for. We offered you a lot of money and ask that you reconsider our offer or come down further so we can come to some agreement in the near term. Are you able to come down further?

  25. Message 025 From LockBit 3.0 Actor / other Date

    What you suggested does not suit us. We gave you a discount

  26. Message 026 From Victim Victim Date

    Your demand of millions of dollars isn't something that is reasonable or feasible... we just don't have that kind of cash. We ask that you help us out with a reduction in the price.

  27. Message 027 From LockBit 3.0 Actor / other Date

    $3,600,000

  28. Message 028 From LockBit 3.0 Actor / other Date

    You have taken the wrong position. As long as you negotiate in this way, we will not get to the right result. We're not going to give you a big discount.

  29. Message 029 From LockBit 3.0 Actor / other Date

    well?

  30. Message 030 From Victim Victim Date

    Thank you for the discount but as we keep telling you we cannot afford anything near that price. We are still working as hard as we can to free up additional funds. We have a meeting scheduled this week to discuss and will give you an updated offer after our meeting.

  31. Message 031 From LockBit 3.0 Actor / other Date

    Good. We'll wait for the results of your meeting.

  32. Message 032 From LockBit 3.0 Actor / other Date

    well?

  33. Message 033 From Victim Victim Date

    Your price is still far beyond anything that we're able to pay. This has been going on for some time now and we would like to put it behind us. To that end we would like to offer $375,000 to be done.

  34. Message 034 From LockBit 3.0 Actor / other Date

    Your price is still not satisfactory to us. We will give you an additional discount. Paying $3,575,000.

  35. Message 035 From Victim Victim Date

    That's still far beyond what we're able to pay and we're not going to have everyone available this weekend to discuss further. We will discuss your offer when everyone returns after the weekend and we will reach out then.

  36. Message 036 From LockBit 3.0 Actor / other Date

    We are waiting for an answer tomorrow.

  37. Message 037 From LockBit 3.0 Actor / other Date

    ?

  38. Message 038 From Victim Victim Date

    We were able to meet and we can increase our offer, although not by much. We can make $400,000 available to settle this incident. Can you accept?

  39. Message 039 From LockBit 3.0 Actor / other Date

    Unfortunately, that's not enough either. We have consulted and decided to give you an additional discount of $75,000

  40. Message 040 From LockBit 3.0 Actor / other Date

    $3,500,000

  41. Message 041 From LockBit 3.0 Actor / other Date

    Decryptor will delete at - 2023-04-20 10:43:18

  42. Message 042 From LockBit 3.0 Actor / other Date

    As you can see in the chat window, your decryptor has been removed

  43. Message 043 From Victim Victim Date

    We saw your message and see your site says the decryption tool has been deleted. Are you telling us we have no way to restore our files now? Is it actually deleted?

  44. Message 044 From LockBit 3.0 Actor / other Date

    I saved the decryptor before deleting

  45. Message 045 From LockBit 3.0 Actor / other Date

    When will yoy pay? it's time to pay

  46. Message 046 From LockBit 3.0 Actor / other Date

    If you do not respond, we will consider this to be ignoring and will have to move on to publication. You have no initiative in resolving the issue, you are not contacting us, do you want us to publish your data?

  47. Message 047 From Victim Victim Date

    Thank you for not deleting the decryptor and we were concerned it would be gone. We understand you want to get a deal done, but you encrypted our files at what was already a very difficult time. We had just recovered from another ransomware event with a different group. We had only barely gotten our systems running again. After dealing with that, we do not have much of anything left to offer you due to all of the costs associated with the first ransomware group. We want to purchase your decryptor and get back to business but we simply cannot due to the first attack.

  48. Message 048 From LockBit 3.0 Actor / other Date

    Apparently after the first attack you did not understand that it is necessary to monitor the security of systems. After payment, we will let you know how your network was penetrated, we will not attack you again and tell you what to do to prevent such cases again. The first group didn't give you any advice?

  49. Message 049 From Victim Victim Date

    No, the first group did not give us any advice. And unfortunately, as we have said we can't pay the amount you are asking. If we could, we would gladly pay it. Two of these attacks in very short order has left us very distraught and in a bad place. But we cannot give you what we don't have. We can still offer you the same amount we did before of $400,000 that we can pay in short order if you are willing to accept it. We just want to be done with this and get back to business as this has been extremely difficult for us.

  50. Message 050 From LockBit 3.0 Actor / other Date

    No, it means that the first attack did not make you understand that you need to monitor and ensure the safety of your company, employees and reputation. You have to pay for all that. Usually companies take care of this, pay good sysadmins, buy different programs and more, but in short ensure security. Or pay for pentest services with post-pay, which is what we do, and we know the price of their services and their work. Based on all this, the amount you offer is very small, and it is not enough to solve the problem. The price is $3,600,000.

  51. Message 051 From LockBit 3.0 Actor / other Date

    Well? Time to pay, or else the first part of the data will be on the blog. You have been given plenty of time

  52. Message 052 From LockBit 3.0 Actor / other Date

    http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/JrqwKtlakpd7MSjN645b448fb2678