LockBit Ransomware Gang Hacked, Operations Data Leaked

Security researchers observed that LockBit's leak site was defaced and a ZIP archive containing an SQL database from LockBit's affiliate panel was released; the leak includes nearly 60,000 Bitcoin addresses, over 4,000 victim negotiation chats, plaintext credentials for ~70 administrators/affiliates, and ransomware builds/configs. Analysts note the disclosures reveal LockBit tactics (targeting backups/NAS, process/service kill lists, exploitation of known backups vulnerabilities) and offer insights into victim geography, ransom amounts, and the group's reduced activity following prior law enforcement takedowns.