// Context
About This Negotiation
This transcript documents a lockbit3.0 ransomware negotiation with PS Energy.
The negotiation consisted of 25 messages exchanged over 16 days, beginning on 2023-03-29.
The initial ransom demand was $2.0M. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[PS Energy] — 29.03.2023 15:52:26 UTC — Message 1/25
[Chat started]
[PS Energy] — 29.03.2023 15:52:51 UTC — Message 2/25
Hello, can someone please help us? We've received some calls telling us that our company is posted on some website. We need to talk this through with you but that posting has to be removed before we do.
[lockbit3.0] — 29.03.2023 15:53:37 UTC — Message 3/25
Hi, yes, we can help. We'll delete the post now.
[lockbit3.0] — 29.03.2023 16:23:44 UTC — Message 4/25
Post deleted. To decrypt the data and avoid publication you need to pay us.
[PS Energy] — 29.03.2023 16:50:09 UTC — Message 5/25
How much?
[lockbit3.0] — 29.03.2023 17:00:24 UTC — Message 6/25
$2,000,000
[lockbit3.0] — 29.03.2023 17:00:41 UTC — Message 7/25
We will send you a tree of some of your data that we have downloaded. Select a few files from the list and we will send them to you as proof.
[PS Energy] — 29.03.2023 17:07:34 UTC — Message 8/25
We need to see everything that you took, before we even consider that amount.
[lockbit3.0] — 29.03.2023 17:12:01 UTC — Message 9/25
Download link: [REDACTED URL]
[lockbit3.0] — 29.03.2023 17:12:26 UTC — Message 10/25
Password: dmCjKu!4oTDl5X@7#OZWI9ESh
[lockbit3.0] — 29.03.2023 17:12:42 UTC — Message 11/25
The entire list of downloaded data is kept confidential so as not to violate the privacy of the company and the data we downloaded. We do not know exactly who we are negotiating with and will not disclose such information.
[lockbit3.0] — 04.04.2023 11:21:25 UTC — Message 12/25
time to pay
[PS Energy] — 04.04.2023 15:36:15 UTC — Message 13/25
can you provide these files?
[PS Energy] — 04.04.2023 15:36:58 UTC — Message 14/25
PSE DIRECT DEPOSIT FOR CLIENTS.pdf, Card List 062818.xlsx, AR Aged Trial Balance Xcel Voyager through 08.26.2021.pdf, ReportsDownloaded181219125827.zip
[lockbit3.0] — 04.04.2023 15:48:56 UTC — Message 15/25
yes
[lockbit3.0] — 04.04.2023 16:05:36 UTC — Message 16/25
[REDACTED URL]
[lockbit3.0] — 10.04.2023 12:38:36 UTC — Message 17/25
time to pay
[PS Energy] — 10.04.2023 14:30:58 UTC — Message 18/25
We'd like to pay but you have to understand that the number you're asking is totally out of reach for us. We dont have that kind of money, we're just a small privately owned business. We can't afford anything near that number.
[lockbit3.0] — 10.04.2023 14:40:59 UTC — Message 19/25
We know exactly what kind of company you are, we have studied you. In addition, we have a lot of your data. You are a multimillion-dollar company that can afford that amount. The only question is whether you are willing to pay damages and losses after your data is published. If you continue to negotiate like this, we will go nowhere and we will be forced to go public.
[PS Energy] — 10.04.2023 16:59:27 UTC — Message 20/25
We're not sure what you're looking at, but we have not been doing as well as we were in the past. $2 million isn't something we can afford to lose, nor something we have on hand. We want to make a deal and still need your help with our files, but if we could work towards a more affordable price that would really help things move faster for both of us.
[lockbit3.0] — 10.04.2023 17:48:28 UTC — Message 21/25
And we are not sure of your interest in making a deal.Therefore, we will not give you a discount at this stage.
[PS Energy] — 11.04.2023 14:16:50 UTC — Message 22/25
We also are not sure of your interest in making a deal, we've stated several times that we can't afford $2 million yet you haven't been willing to provide us with a lower number.
[lockbit3.0] — 11.04.2023 14:23:34 UTC — Message 23/25
Then change the negotiator or invite a more interested person in resolving the issue.Who will not waste time.It is extremely stupid to ask for a discount on nothing, not offering anything in return.Right?
[lockbit3.0] — 11.04.2023 14:25:14 UTC — Message 24/25
You want a discount, we can give you a discount of 1%. It's a good discount. And the amount will be less than $ 2000000, pay. You have achieved what you wanted. The next step is up to you. Waiting for payment \
[lockbit3.0] — 14.04.2023 16:13:20 UTC — Message 25/25
when will you pay?