{ "chat_id": "Chat: *************FFFFFF", "messages": [ { "party": "Victim", "content": "[Chat started]", "timestamp": "27.01.2023 22:48:43 UTC" }, { "party": "LockBit 3.0", "content": "hi. to decrypt the data and avoid publication you need to pay us. we haven't published your name on our blog yet", "timestamp": "27.01.2023 22:49:52 UTC" }, { "party": "LockBit 3.0", "content": "soon we will send you a tree of stolen data", "timestamp": "27.01.2023 22:51:46 UTC" }, { "party": "Victim", "content": "We found your telling us to come here. What is going on?", "timestamp": "27.01.2023 22:52:33 UTC" }, { "party": "LockBit 3.0", "content": "need to pay", "timestamp": "27.01.2023 22:53:31 UTC" }, { "party": "LockBit 3.0", "content": "http://lockbitfilzhrvt6eya2lvnp7te4iifzmwybendqclgujqbzu3k4gaid.onion/r/EmcJ0p6nJv#59UjkgcJ3APksKHGhDXjpNhhXTNkiMXxsVAGPmV7DOA=", "timestamp": "27.01.2023 22:54:42 UTC" }, { "party": "Victim", "content": "Thank you for the list. You said we need to pay, how much is that?", "timestamp": "28.01.2023 14:10:03 UTC" }, { "party": "LockBit 3.0", "content": "250000$", "timestamp": "28.01.2023 17:13:02 UTC" }, { "party": "LockBit 3.0", "content": "after payment, we will delete your data and provide a decryptor", "timestamp": "28.01.2023 17:13:29 UTC" }, { "party": "Victim", "content": "The list is with leadership for review. Is this the full list of all data taken?", "timestamp": "29.01.2023 15:32:02 UTC" }, { "party": "LockBit 3.0", "content": "yes", "timestamp": "29.01.2023 15:35:40 UTC" }, { "party": "LockBit 3.0", "content": "time to pay now", "timestamp": "30.01.2023 12:51:00 UTC" }, { "party": "Victim", "content": "Thank you for answering our questions. The leadership is reviewing the file list. No one was here over the weekend to get this done. Thank you for your patience. ", "timestamp": "30.01.2023 14:12:26 UTC" }, { "party": "LockBit 3.0", "content": "OK", "timestamp": "30.01.2023 14:14:21 UTC" }, { "party": "Victim", "content": "the list is rather large! How much data in all did you take? It seems like alot!", "timestamp": "31.01.2023 15:09:59 UTC" }, { "party": "LockBit 3.0", "content": "all the data we took is on this list. when you pay, we will permanently delete it, and decrypt all your systems. the sooner you pay, the sooner it will be over and you will go back to your old life", "timestamp": "31.01.2023 17:16:04 UTC" }, { "party": "Victim", "content": "How do we know you have this data?", "timestamp": "01.02.2023 14:29:52 UTC" }, { "party": "LockBit 3.0", "content": "select some files from the tree, and we will send them", "timestamp": "01.02.2023 14:31:07 UTC" }, { "party": "Victim", "content": "OK. I will get with my leadership so they can choose what files to send. ", "timestamp": "02.02.2023 13:49:01 UTC" }, { "party": "LockBit 3.0", "content": "hurry", "timestamp": "02.02.2023 14:20:41 UTC" }, { "party": "Victim", "content": "It's a long list. How much data is this?! We are hopeful to have the file names for you today or tomorrow morning. ", "timestamp": "03.02.2023 14:03:48 UTC" }, { "party": "LockBit 3.0", "content": "ok", "timestamp": "03.02.2023 14:06:39 UTC" }, { "party": "Victim", "content": "Here is the list of files. NEWBRIDGE\\2021 DMHAS license\\licenses expansion\\attachmentsCO - Parsippany.pdf \\ NEWBRIDGE\\HR\\HR FORMS\\Job Posting & Change FormsCHANGE OF STATUS Checklist 1.14.2020.docx \\ NEWBRIDGE\\HR\\Job Announcements\\2022Clinician Sparta-FT internal- 9.2.22.docx \\ NEWBRIDGE\\HR\\HR FORMS\\AccommodationsAccommodation REQUEST - Employee.docx \\ NEWBRIDGE\\2021 DMHAS license\\continuation letter 1.26.21New Bridge Services Inc. 1-26-21 Continuation Letter (003).docx", "timestamp": "04.02.2023 13:34:47 UTC" }, { "party": "LockBit 3.0", "content": "ok, wait", "timestamp": "04.02.2023 15:01:28 UTC" }, { "party": "LockBit 3.0", "content": "http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/tASrJy1eXM#9fOlbyIxE9fmiNNfZSDfX9PJ19RHcrlhxrJ9/99f7Bg=", "timestamp": "04.02.2023 15:32:14 UTC" }, { "party": "LockBit 3.0", "content": "password qtuhK4vpjG^fgM5ZRm$psn5mO", "timestamp": "04.02.2023 15:32:31 UTC" }, { "party": "Victim", "content": "Thank you for the files. I will give them to my leadership to review. ", "timestamp": "05.02.2023 14:13:15 UTC" }, { "party": "LockBit 3.0", "content": "OK", "timestamp": "05.02.2023 14:20:11 UTC" }, { "party": "Victim", "content": "what is the next step in this process?", "timestamp": "07.02.2023 17:26:34 UTC" }, { "party": "LockBit 3.0", "content": "You pay", "timestamp": "07.02.2023 17:27:04 UTC" }, { "party": "Victim", "content": "How do we know you can fix our systems?", "timestamp": "08.02.2023 14:17:21 UTC" }, { "party": "LockBit 3.0", "content": "You have the opportunity to make test decryptions", "timestamp": "08.02.2023 14:30:14 UTC" }, { "party": "LockBit 3.0", "content": "After payment, we will provide you with a decryptor for the entire network, identify vulnerabilities and delete your data", "timestamp": "08.02.2023 14:31:15 UTC" }, { "party": "Victim", "content": "How do we make test decryptions? ", "timestamp": "09.02.2023 14:23:11 UTC" }, { "party": "LockBit 3.0", "content": "There is a mention on your page, upload a small encrypted file", "timestamp": "09.02.2023 14:27:49 UTC" }, { "party": "LockBit 3.0", "content": "Please perform the actions faster.Otherwise, we will change the negotiator, and make mentions of your company on the blog.", "timestamp": "09.02.2023 14:30:22 UTC" }, { "party": "LockBit 3.0", "content": "I know that your goal is to drag out negotiations as long as possible so that we get nervous and agree to a smaller amount. by asking dumb questions you are playing against yourself and risk getting blogged. the test decryptor window is to the left of the chat.", "timestamp": "09.02.2023 15:54:14 UTC" }, { "party": "Victim", "content": "We are not trying to drag anything out. We have never dealt with anything like this before and I wanted to be sure. I will get my leadership team to give me some files.", "timestamp": "09.02.2023 20:34:17 UTC" }, { "party": "LockBit 3.0", "content": "you can say what you want, but we have a lot of experience and we understand everything. each machine has its own ID. for a successful transcription you need to take the file from your PC, with the ID you are logged into the chat! or go to the chat with the ID of the PC from which you take the file for test decryption", "timestamp": "09.02.2023 20:43:48 UTC" }, { "party": "Victim", "content": "The decrypted file that you sent us looks corrupt. Can we send you another one. ", "timestamp": "10.02.2023 17:10:11 UTC" }, { "party": "LockBit 3.0", "content": "You can follow the link to the chat from any PC, take the file from this PC and use the test decryption", "timestamp": "10.02.2023 17:53:46 UTC" }, { "party": "Victim", "content": "We tried to do it on another PC. Your decrypt tester is not letting us upload any more files. ", "timestamp": "10.02.2023 19:44:28 UTC" }, { "party": "LockBit 3.0", "content": "send the file, we will decrypt it for you. it should not be an important file, a picture or pdf", "timestamp": "10.02.2023 19:47:38 UTC" }, { "party": "Victim", "content": "https://anonfiles.com/6cC1jbX1y7/LcfUDlk_dB6AsqMxo", "timestamp": "10.02.2023 19:52:30 UTC" }, { "party": "Victim", "content": "We've tried to attach more files in the chat but it wont work. Does this work for you?", "timestamp": "10.02.2023 19:53:06 UTC" }, { "party": "LockBit 3.0", "content": "ok, wait", "timestamp": "10.02.2023 19:58:37 UTC" }, { "party": "LockBit 3.0", "content": "File: [inetres.adm.7z]", "timestamp": "11.02.2023 06:09:27 UTC" }, { "party": "Victim", "content": "Thank you for the file. I gave it to my leadership to review.", "timestamp": "13.02.2023 14:49:12 UTC" }, { "party": "LockBit 3.0", "content": "hurry up! very slow", "timestamp": "13.02.2023 14:50:08 UTC" }, { "party": "Victim", "content": "My leadership said that they don't know what that file was that you sent and they wanted to send another one. ", "timestamp": "14.02.2023 15:26:58 UTC" }, { "party": "LockBit 3.0", "content": "You sent us the file yourself. Okay. Send us another file", "timestamp": "14.02.2023 15:32:25 UTC" }, { "party": "LockBit 3.0", "content": "You will do the test yourself faster if you perform the action correctly.Your visiting this chat room once a day does not contribute to the solution.", "timestamp": "14.02.2023 19:23:08 UTC" }, { "party": "Victim", "content": "Ok. We will find one and get back to you ASAP.", "timestamp": "14.02.2023 20:22:30 UTC" }, { "party": "LockBit 3.0", "content": "hurry up", "timestamp": "14.02.2023 20:24:09 UTC" }, { "party": "Victim", "content": "Since all the names were changed on our files it is taking a long time making the appropriate selection. ", "timestamp": "15.02.2023 19:45:34 UTC" }, { "party": "LockBit 3.0", "content": "It takes a maximum of 1 hour.We are well aware that you are a representative of the recovery company and want to earn yourself.But in fact you are damaging your clients and yourself as a negotiator", "timestamp": "15.02.2023 19:52:45 UTC" }, { "party": "LockBit 3.0", "content": "http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/MM3CQtzq3b0kInv663edf735a5c73", "timestamp": "16.02.2023 09:27:18 UTC" }, { "party": "LockBit 3.0", "content": "You have time to think about whether to drag out the negotiations further, or pay up and close the matter quietly.", "timestamp": "16.02.2023 09:28:12 UTC" }, { "party": "Victim", "content": "I'm not part of a recovery company. We are trying to work with you. Once you publish our data there will be no point in talking with you. I will check with my team on the status of getting more sample files. ", "timestamp": "16.02.2023 14:25:40 UTC" }, { "party": "LockBit 3.0", "content": "don't care! you won't scare us with this. you've been taking too long, whoever you are. your name will be published first, and then only your details. if you don't pay, others will pay. our patience is over", "timestamp": "16.02.2023 14:29:44 UTC" }, { "party": "Victim", "content": "https://anonfiles.com/V2Ad7eYfy1/6X0RFtq_dB6AsqMxo", "timestamp": "16.02.2023 23:08:52 UTC" }, { "party": "LockBit 3.0", "content": "ok, wait", "timestamp": "16.02.2023 23:15:45 UTC" }, { "party": "LockBit 3.0", "content": "File: [Quality Management Coordinator 12.1.2017.pdf.7z]", "timestamp": "18.02.2023 11:23:28 UTC" }, { "party": "LockBit 3.0", "content": "when will you pay?!", "timestamp": "20.02.2023 12:26:55 UTC" }, { "party": "Victim", "content": "My leadership is going to meet to discuss this.", "timestamp": "21.02.2023 14:12:04 UTC" }, { "party": "LockBit 3.0", "content": "Hurry up", "timestamp": "21.02.2023 14:13:48 UTC" }, { "party": "Victim", "content": "The leadership meeting has been delayed due to something beyond our control. Thank you for your continued patience with us. ", "timestamp": "22.02.2023 16:04:18 UTC" }, { "party": "LockBit 3.0", "content": "If you hope that by delaying negotiations you will lower the price, you are mistaken", "timestamp": "22.02.2023 16:09:54 UTC" }, { "party": "Victim", "content": "I am not trying to delay negotiations. I have not heard back from the board yet. ", "timestamp": "24.02.2023 15:11:12 UTC" }, { "party": "LockBit 3.0", "content": "it's time to pay", "timestamp": "27.02.2023 06:23:24 UTC" } ] }