// Context
About This Negotiation
This transcript documents a Hive ransomware negotiation with a redacted victim organisation.
The negotiation consisted of 19 messages exchanged over Unknown.
The initial ransom demand was $1.2M. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[Hive] — 2021-10-05 12:18 — Message 1/19
Hello and welcome to Hive.
How may I help you?
[Victim] — 2021-10-05 12:18 — Message 2/19
yo son of bitches
[Victim] — 2021-10-05 12:19 — Message 3/19
pivot a lot of machines for you to make the ransom first that I
[Victim] — 2021-10-05 12:19 — Message 4/19
can u suck my dick ?
[Hive] — 2021-10-05 18:03 — Message 5/19
We have 1.8 TB of exfiltrated files.
Stop talking shit otherwise I'll disclose them
[Victim] — 2021-10-05 18:42 — Message 6/19
I am not sure who sent that message prior
[Victim] — 2021-10-05 18:43 — Message 7/19
How much do you want for the decryption?
[Victim] — 2021-10-05 18:52 — Message 8/19
The individual who sent the prior message, I believe was a user, following the guide on how to chat. They do not represent or speak for the company.
[Hive] — 2021-10-05 21:50 — Message 9/19
To decrypt your files and prevent them to be disclosed you will need to pay $1,200,000.
[Hive] — 2021-10-05 21:50 — Message 10/19
The price is not a subject to discuss.
[Victim] — 2021-10-05 22:15 — Message 11/19
Unfortunately Supreme lacks anywhere near that we will have to go out of business.
[Victim] — 2021-10-05 23:01 — Message 12/19
Is the price at all negotiable? It would take us a long time to get that much
[Hive] — 2021-10-05 23:12 — Message 13/19
The price isn't negotiable. I'll wait, there is no hurry
[Victim] — 2021-10-05 23:14 — Message 14/19
Okay we will have to talk to the bank, do I reconnect to this console?
[Hive] — 2021-10-05 23:14 — Message 15/19
reconnect for what?
[Victim] — 2021-10-05 23:19 — Message 16/19
Same link to come to this portal here
[Hive] — 2021-10-05 23:21 — Message 17/19
yes
[Victim] — 2021-10-08 02:43 — Message 18/19
We need more time for this amount of money, we have a meeting Monday with the Board of Directors. Please give us time.
[Hive] — 2021-10-08 02:54 — Message 19/19
Okay