ION Group declined to comment on the statement. Lockbit communicated the claim to Reuters via its online chat account on Friday but said there was "no way" it would offer details. The FBI did not immediately reply to a request for comment.
ION was earlier Friday removed from Lockbit's extortion website, typically seen as a sign that stricken companies have forked over a ransom. "When a victim is delisted, it most commonly means either that the victim has agreed to enter negotiations or that it has paid," said ransomware expert Brett Callow of New Zealand-based cybersecurity company Emsisoft.
Callow said there was an outside chance that there was some other explanation for Lockbit publicly backing off.
'Good to know that some criminals still have the courtesy to ask for ransom and not just take what they want!'
CitadelScandal