LockBit ransomware gang hacked, victim negotiations exposed

LockBit's dark web affiliate panels were defaced and an SQL dump (dated April 29, 2025) was posted, exposing ~59,975 bitcoin addresses, build and build-configuration records, 4,442 victim negotiation messages, and 75 admin accounts with plaintext passwords; the group's operator claimed no private keys or victim data were leaked. The disclosure undermines LockBit's infrastructure and reputation and creates risks from credential reuse, victim doxxing, and analysis of affiliate operations.