// Context
About This Negotiation
This transcript documents a lockbit3.0 ransomware negotiation with HGC Global Communications.
The negotiation consisted of 8 messages exchanged over 1 days, beginning on 2023-07-11.
The initial ransom demand was Unknown. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[HGC Global Communications] — 11.07.2023 11:07:47 UTC — Message 1/8
[Chat started]
[HGC Global Communications] — 11.07.2023 11:10:17 UTC — Message 2/8
May I know how much are you charging for the decryptor?
[lockbit3.0] — 11.07.2023 11:20:52 UTC — Message 3/8
hello
[lockbit3.0] — 11.07.2023 11:22:35 UTC — Message 4/8
Price per decrypt 19 000 000 usd in btc
[lockbit3.0] — 11.07.2023 11:23:53 UTC — Message 5/8
In addition to the attack on your network, several hundred GB of your data were stolen.
[lockbit3.0] — 11.07.2023 11:24:53 UTC — Message 6/8
This price includes our software and data deletion so that we do not publish them anywhere.
[HGC Global Communications] — 12.07.2023 09:45:24 UTC — Message 7/8
Frankly, the company being attacked is an insolvent company which has been in liquidation administration for a few years already. The company basically has no valuable asset and it can only afford USD5,000 for the decryptor. I would be grateful if you could accept the offer of USD5,000 in BTC for the decryptor.
[lockbit3.0] — 12.07.2023 12:55:53 UTC — Message 8/8
it's funny, why would they pay anything at all? you have 48 hours to start adequate negotiations, then I publish a blog and attach this correspondence to the blog with your files