// Context
About This Negotiation
This transcript documents a Akira ransomware negotiation with a redacted victim organisation.
The negotiation consisted of 7 messages exchanged over Unknown.
The initial demand is not clearly stated in the transcript. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[Victim] — — Message 1/7
> Hello. We received your message and are authorised to speak with you. However, we are concerned about the security of this chat portal because your note has been sent to many people. Please can you provide us with an email address so that we can communicate with you further.
[Akira] — — Message 2/7
> Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.
[Akira] — — Message 3/7
> Do you need a new chat ID?
[Victim] — — Message 4/7
> Thank you. We do have authority to speak with you. If we get a new chat ID, how will we know that it is secure and nobody else has access? We prefer email.
[Akira] — — Message 5/7
> This chat is the only one place to communicate in secure. You will get a one-time note that contains a new chat ID. This note will be destroyed once you open it.
[Akira] — — Message 6/7
> [REDACTED URL]
[Akira] — — Message 7/7
> We look forward to your message in the new chat room.