From Cointelegraph

May 8, 2025 3:31 am:

Almost 60,000 Bitcoin addresses linked to LockBit’s ransomware infrastructure were leaked after hackers breached the group’s dark web affiliate panel. The leak contained a MySQL database dump with crypto-related information for blockchain analysts to trace illicit financial flows. Ransomware is a type of malware that demands payment, often in digital assets like Bitcoin, in exchange for decryption keys.

No Bitcoin private keys were leaked in the breach of almost 60,000 wallets. A conversation with a LockBit operator confirmed the breach but stated no private keys or data were lost. The leaked database contained 20 tables, including individual ransomware builds and negotiation messages between victims and the ransomware organization.

The breach of LockBit’s operations is linked to the Everest ransomware site breach, with analysts noting similarities in the messaging used. The exposure of addresses allows law enforcement and blockchain investigators to track ransom payments and potentially link them to known wallets. The incident highlights the role of crypto in the ransomware economy and the challenges faced by victims.

Read more at Cointelegraph: 60K Bitcoin addresses leaked as LockBit ransomware gang gets hacked