LockBit Data Leaked Online, Including 60,000 Bitcoin Addresses

A hacker has leaked data from LockBit ransomware group, including over 60,000 Bitcoin addresses and internal communications, following a breach of their management platform. The hack exploited a vulnerability in the PHP code that allowed the attacker to gain access to sensitive files. While LockBit claims no critical data was compromised, SlowMist security firm identified leaked information including user credentials, ransom negotiations logs and company contacts. A message from the hacker left on a publicly accessible website indicated this attack took place on an encrypted onion site that hosts their management system.