Russian-linked ransomware group LockBitSupp has claimed to have leaked classified documents as a “personal birthday gift” to newly appointed FBI Director Kash Patel. In a post on its dark leak blog on Tuesday, the group mocked Patel while sharing what it described as an archive of sensitive materials.
The post, which began with a sarcastic birthday greeting, congratulated Patel on becoming the ninth director of the Federal Bureau of Investigation and warned that his new role “will not be easy.” The group alleged that the leaked files, organized into more than 250 folders dated May 29, 2024, contained classified information. Initially, the archive was password-protected, with LockBitSupp providing a TOX ID for Patel to contact them directly.
Nominations are open for Honouring Women in Cyberspace on International Women’s Day 2025- Nominate Now!
LockBitSupp claimed reluctance to release the documents, stating, “Please contact me personally, I am so reluctant to publish this information that could not only negatively affect the reputation of the FBI, but destroy it as a STRUCTURE.” The group characterized FBI agents as “extortionists, liars, blackmailers, and professional manipulators” while portraying itself as a cybersecurity advocate working for a safer United States.
FBI’s Pursuit of LockBit
The post also included another message dated February 24, 2024, detailing how the FBI infiltrated LockBit’s servers on February 19. The group admitted that the breach was due to its leader’s failure to patch a PHP vulnerability. However, LockBitSupp downplayed the impact, claiming the FBI only seized 1,000 of its 40,000 decryptors.
LockBitSupp alleged that the FBI’s crackdown was not just about cybercrime but also linked to its plans to leak documents related to Fulton County, Georgia—a key area in former President Donald Trump’s legal battles over the 2020 election results. The ransomware operator claimed that if the FBI had not disrupted its operations, those documents would have been released the same day.
While the authenticity and content of the alleged classified documents remain unverified, the FBI has been actively pursuing LockBit, which has been one of the most prolific ransomware gangs in recent years. Patel, who was sworn in as FBI Director on February 21, 2024, now faces a high-stakes challenge in dismantling cybercriminal networks like LockBit.