Nightspire — 20260217
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 31 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Nightspire
- Record date
- Feb 17, 2026
- Messages
- 31
- Participants
- Nightspire, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date Hey. UUID: [redacted]. FBI San Francisco already notified. Full screenshots sent. No payment.
-
Message 002 From Nightspire Actor / other Date Not recorded FBI? They won’t stop your board from reading tomorrow’s headlines.
-
Message 003 From Nightspire Actor / other Date Not recorded 500+ GB exfiltrated: signed client contracts with penalties, Q4 financials showing revenue drop, internal audit report listing compliance violations, customer database with 47,000 PII records.
-
Message 004 From Nightspire Actor / other Date Not recorded https://gofile.io/[redacted]. This is list of files we have stolen.
-
Message 005 From Victim Victim Date Not recorded You’re leaking real contracts? That’s breach of NDAs. Clients will sue us into oblivion.
-
Message 006 From Nightspire Actor / other Date Not recorded Exactly. One leaked contract = lost deals worth millions. Your biggest client sees their pricing exposed? Gone.
-
Message 007 From Victim Victim Date Not recorded Stop posting. This is economic sabotage. We’re escalating to SEC if financials go out.
-
Message 008 From Nightspire Actor / other Date Not recorded SEC? They’ll fine you for poor controls while your stock (if public) or valuation tanks.
-
Message 009 From Nightspire Actor / other Date Not recorded $150k BTC. 48 hours. Or full financial package drops: tax filings, vendor invoices, M&A due diligence folder.
-
Message 010 From Nightspire Actor / other Date Not recorded We release audits and you face regulatory hell. Fines, investigations, lost trust.
-
Message 011 From Nightspire Actor / other Date Not recorded Pay us or watch your next board meeting include screenshots from dark web buyers.
-
Message 012 From Victim Victim Date Not recorded This is insane. $150k still impossible. We’re mid-size.
-
Message 013 From Nightspire Actor / other Date Not recorded Mid-size with big secrets. $135k within 24 hours. Or customer PII batch goes to competitors first.
-
Message 014 From Nightspire Actor / other Date Not recorded Yes. Imagine your top 5 clients getting spam from rivals using your stolen data.
-
Message 015 From Victim Victim Date Not recorded Board saw the samples. Panic mode. $110k is max quick cash.
-
Message 016 From Nightspire Actor / other Date Not recorded $110k? After we hold your audit violations? $130k. Mention feds again, back to $150k + extra leak.
-
Message 017 From Victim Victim Date Not recorded Fine. Everyone terrified. $118k. No more company docs please.
-
Message 018 From Nightspire Actor / other Date Not recorded $125k final. Or tomorrow full customer database CSV hits leak sites.
-
Message 019 From Victim Victim Date Not recorded $120k. Drained everything – reserves, lines, exec personal. Don’t destroy us.
-
Message 020 From Nightspire Actor / other Date Not recorded $120k accepted. Should’ve paid before your contracts went public.
-
Message 021 From Nightspire Actor / other Date Not recorded BTC: bc1[redacted]
-
Message 022 From Nightspire Actor / other Date Not recorded Send now. TXID screenshot or next batch drops in 30 min.
-
Message 023 From Victim Victim Date Not recorded Transferring. 10-15 min confirms. Hold the leaks.
-
Message 024 From Victim Victim Date Not recorded Sent. TXID: [redacted]
-
Message 025 From Nightspire Actor / other Date Not recorded Funds received. Clean.
-
Message 026 From Nightspire Actor / other Date Not recorded https://gofile.io/[redacted] This is decryption key & tool and also guide.txt
-
Message 027 From Nightspire Actor / other Date Not recorded Test one machine at the first.
-
Message 028 From Victim Victim Date Not recorded Files decrypting. All good.
-
Message 029 From Nightspire Actor / other Date Not recorded Deletion log: https://gofile.io/[redacted] 500+ GB wiped – contracts, financials, audits, PII. No copies left.
-
Message 030 From Nightspire Actor / other Date Not recorded No more leaks. Stay silent.
-
Message 031 From Victim Victim Date Not recorded Thank you.