// Context
About This Negotiation
This transcript documents a Akira ransomware negotiation with a redacted victim organisation.
The negotiation consisted of 16 messages exchanged over Unknown.
The initial ransom demand was $150,000. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[Akira] — — Message 1/16
> Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
[Akira] — — Message 2/16
> Are you going to work with us?
[Victim] — — Message 3/16
> how much you can decrypt my files
[Victim] — — Message 4/16
> hello everyone is here?
[Victim] — — Message 5/16
> hello is anyone here
[Victim] — — Message 6/16
> hello is anyone here?
[Akira] — — Message 7/16
> We are here. Please wait.
[Victim] — — Message 8/16
> how much ?
[Victim] — — Message 9/16
> bro?
[Victim] — — Message 10/16
> hi?
[Victim] — — Message 11/16
> customers are waiting for your message
[Akira] — — Message 12/16
> List.7z // 117 KB
[Akira] — — Message 13/16
> These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10mb size from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10mb size to our chat and we will upload decrypted copies back.
[Akira] — — Message 14/16
> We're looking through your files to calculate a fair demand to you. I will let you know the sum shortly. We offer:
1) full decryption assistance;
2) evidence of data removal;
3) security report on vulnerabilities we found;
4) guarantees not to publish or sell your data;
5) guarantees not to attack you in the future.
Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
[Akira] — — Message 15/16
> We're willing to set a $150,000 price for ALL the services we offer.
[Akira] — — Message 16/16
> You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.