// Context
About This Negotiation
This transcript documents a Hive ransomware negotiation with a redacted victim organisation.
The negotiation consisted of 15 messages exchanged over Unknown.
The initial ransom demand was $300,000. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[Hive] — 13 December 2021 11:12 — Message 1/15
Hello and welcome to Hive.
How may I help you?
[Victim] — 13 December 2021 11:15 — Message 2/15
Hello
[Victim] — 13 December 2021 11:16 — Message 3/15
The company does not worth 20M
[Victim] — 13 December 2021 12:30 — Message 4/15
Hello,
[Victim] — 13 December 2021 12:39 — Message 5/15
can you help me to decrypt some files?
[Hive] — 13 December 2021 12:40 — Message 6/15
Yes, to decrypt your files you have to pay $300,000 in Bitcoin.
[Victim] — 13 December 2021 16:19 — Message 7/15
We can pay max 3000$
[Hive] — 13 December 2021 16:21 — Message 8/15
Unfortunately I can't accept this.
[Hive] — 20 December 2021 16:37 — Message 9/15
The final price for you is $100,000.
[Victim] — 22 December 2021 13:01 — Message 10/15
Hello,
[Victim] — 22 December 2021 13:10 — Message 11/15
We don't have the money at this moment.
[Victim] — 22 December 2021 13:12 — Message 12/15
We need to pay you from outside of company funds or else we will have problems with Government financial authorities.
[Victim] — 22 December 2021 13:13 — Message 13/15
For that, we have to gather some money outside the company funds so we need some days to pay.
[Victim] — 22 December 2021 13:13 Read — Message 14/15
How do we pay when we have the money?
[Hive] — 22 December 2021 14:51 — Message 15/15
The offer has been created. There you can find a Bitcoin address and approximate amount in it to pay