{ "chat_id": "Chat: *************7240FE", "messages": [ { "party": "Victim", "content": "[Chat started]", "timestamp": "17.02.2023 14:22:37 UTC" }, { "party": "LockBit 3.0", "content": "hi. to decrypt the data and avoid publication you need to pay us.", "timestamp": "17.02.2023 14:25:39 UTC" }, { "party": "Victim", "content": "We got notice that our name and screenshots of some of our data were posted to your TOR darknet site. We are interested in learning more about this situation. Have you sold the data?", "timestamp": "17.02.2023 14:25:46 UTC" }, { "party": "LockBit 3.0", "content": "soon we will send you a tree of stolen data", "timestamp": "17.02.2023 14:25:56 UTC" }, { "party": "LockBit 3.0", "content": "we did not sell your data. we will publish it for free", "timestamp": "17.02.2023 14:26:32 UTC" }, { "party": "Victim", "content": "ok, has the data been sold yet? How much data do you have?", "timestamp": "17.02.2023 14:26:44 UTC" }, { "party": "LockBit 3.0", "content": "We'll send you the tree now, wait for it.", "timestamp": "17.02.2023 14:27:16 UTC" }, { "party": "Victim", "content": "ok", "timestamp": "17.02.2023 14:27:24 UTC" }, { "party": "LockBit 3.0", "content": "124gb - confidential files, financial reports, hr, passports", "timestamp": "17.02.2023 14:27:53 UTC" }, { "party": "LockBit 3.0", "content": "Download link: http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/FtAmteMZSo#xWzK5WIC7vBW3wzgFup6/RaJMPtdmyk9QGNud23AZ00=", "timestamp": "17.02.2023 14:41:17 UTC" }, { "party": "LockBit 3.0", "content": "Password: B@N$m@piDSvsErZQc(XEEuy6c", "timestamp": "17.02.2023 14:41:31 UTC" }, { "party": "Victim", "content": "Thank you. We will take a look. I'm having a hard time getting into you Tor chat. It keeps timing out. ", "timestamp": "17.02.2023 18:05:46 UTC" }, { "party": "LockBit 3.0", "content": "I and other companies have no complaints. try restarting TOR or using other links from the note", "timestamp": "17.02.2023 18:51:50 UTC" }, { "party": "LockBit 3.0", "content": "Hi, what's the news?", "timestamp": "20.02.2023 13:28:55 UTC" }, { "party": "Victim", "content": "My leadership assessing the value of the data. How much to keep it from being published?", "timestamp": "21.02.2023 13:10:00 UTC" }, { "party": "LockBit 3.0", "content": "1,500,000$ USD", "timestamp": "21.02.2023 13:18:52 UTC" }, { "party": "Victim", "content": "That seems a little excessive to me, but I'll pass it on to my leadership.", "timestamp": "21.02.2023 13:21:13 UTC" }, { "party": "LockBit 3.0", "content": "If you pay quickly, we'll give you a discount.", "timestamp": "21.02.2023 13:22:47 UTC" }, { "party": "LockBit 3.0", "content": "While we're negotiating we've paused the timer and hidden you from the blog", "timestamp": "21.02.2023 13:24:02 UTC" }, { "party": "Victim", "content": "What kind of discount?", "timestamp": "21.02.2023 13:25:04 UTC" }, { "party": "LockBit 3.0", "content": "If you pay within 48 hours, we will give you a 30% discount", "timestamp": "21.02.2023 13:26:06 UTC" }, { "party": "Victim", "content": "I'll pass that along to leadership.", "timestamp": "21.02.2023 13:27:35 UTC" }, { "party": "LockBit 3.0", "content": "Ok", "timestamp": "21.02.2023 13:27:52 UTC" }, { "party": "LockBit 3.0", "content": "what news?", "timestamp": "22.02.2023 19:43:32 UTC" }, { "party": "Victim", "content": "Leadership is still evaluating the data and deciding on if it's important enough to pay you. How would we know for sure if you deleted all our data? Or not sold it? ", "timestamp": "22.02.2023 21:29:42 UTC" }, { "party": "LockBit 3.0", "content": "We do not sell data, without publication. And most importantly - our reputation.", "timestamp": "22.02.2023 21:34:21 UTC" }, { "party": "LockBit 3.0", "content": "it's time to pay", "timestamp": "27.02.2023 20:39:44 UTC" }, { "party": "Victim", "content": "Considering the data you took it is not worth $1.5M to us, nor will you be able to sell the data for even a fraction of that amount on the dark web, what is the least amount you will consider for payment?", "timestamp": "01.03.2023 12:41:58 UTC" }, { "party": "LockBit 3.0", "content": "We are not talking about selling your data. we will put it on our blog for free for everyone if you do not pay. you are negotiating for a very long time, and this will not play into your hands. we know that you are specifically delaying negotiations so that we agree to a lower amount. on the contrary, if you pay quickly we can give you a discount for speed.", "timestamp": "01.03.2023 12:49:16 UTC" }, { "party": "Victim", "content": "What is the discount?", "timestamp": "02.03.2023 15:18:22 UTC" }, { "party": "LockBit 3.0", "content": "we are ready to give you a 30% discount on a quickly payment", "timestamp": "02.03.2023 17:42:59 UTC" }, { "party": "Victim", "content": "Our data is not worth $1M to you or us, but I'll take it to leadship because I'm just the messenger. It will be Monday before I will be able to get back to you. The leadership team will not be around this weekend. ", "timestamp": "03.03.2023 21:44:28 UTC" }, { "party": "LockBit 3.0", "content": "I think you'll understand how much your data is worth after it's published. When you incur reputational losses, fines from the state, courts and others. You will lose even more money than we are asking for. For your company, with multimillion-dollar revenues, paying that amount and forgetting about it won't be a big deal. I'm sure your boss has much more money in his personal cryptocurrency account", "timestamp": "03.03.2023 21:55:47 UTC" }, { "party": "LockBit 3.0", "content": "when wiil you pay?", "timestamp": "08.03.2023 22:34:38 UTC" } ] }