Share this article

Travel Management Firm CWT Pays Out $4.5M in Bitcoin After Ransomware Attack

The U.S. firm paid out a ransom of 414 bitcoin after its corporate files were locked up by the Ragnar Locker malware.

Updated Sep 14, 2021, 9:39 a.m. Published Aug 3, 2020, 1:01 p.m.
locks privacy

A U.S. travel management firm has paid out a fortune in bitcoin after its corporate files were locked up in a ransomware attack.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

  • According to a report by Reuters on Friday, travel firm CWT paid the 414 bitcoin ransom (worth $4.5 million at the time) as part of a deal to recover sensitive files encrypted by the Ragnar Locker ransomware that makes files inaccessible until a bounty has been paid.
  • Hackers said 30,000 of the company's computers were caught up in the attack, although the number has since been disputed by a person familiar with the investigation, Reuters said.
  • The conversation between the hackers and CWT was made public on Saturday, providing a rare insight into how the deal to recover the company's files was struck.
  • In the conversation, a CWT representative can be seen asking how to recover their files and what steps were needed to resolve the problem.
  • The company subsequently confirmed in a statement its systems were back online and that the incident had passed, but declined to comment further due to an ongoing investigation.
  • CWT also said it had informed relevant U.S. and European Union law-enforcement agencies immediately after becoming aware of the incident.

See also: Bitcoin’s Ransomware Problem Won’t Go Away

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Gemini Approved by CFTC to Offer U.S. Prediction Markets, Stock Surges Nearly 14%

Gemini co-founders Cameron and Tyler Winklevoss at White House (Jesse Hamilton/CoinDesk)

The decision allows Gemini’s affiliate to offer supervised event-contract markets to U.S. users, adding regulated forecasting tools as the firm expands its product lineup.

What to know:

  • Gemini said its affiliate, Gemini Titan, received CFTC approval to operate as a Designated Contract Market.
  • The firm stated that the license enables it to offer regulated prediction markets to U.S. customers.
  • The Winklevoss twins praised the decision as aligning with President Trump’s push for U.S. leadership in the crypto sector.