Oh - since I don't think this was ever posted... here's the alleged ransom letter (these were on pastebin and picked up by some news sources, so either PWC or MB posted them - or they're fake
):
Dear PricewaterhouseCoopers LLP
Using your Office @ 830 Crescent Centre Drive, Suite 260, Franklin, TN 37067 Telephone: [1] (615) 503-2860 we were able to gain access to your network file servers and copy over the tax documents for one Willard M Romney and Ann D Romney. We are sure that once you figure out where the security breach was, some people will probably get fired but that is not our concern.
All major news media outlets are going to be sent an encrypted copy of the most recent tax years that your company had on file since you did not have them all in a convenient electronic form. The years before 2010 will be of great interest to many. If the parties interested do not want the encrypted key released to the public to unlock these documents on September 28 of this year then payment will be necessary.
The deal is quite simple. Convert $1,000,000 USD to Bitcoins (Google if if you need a lesson on what Bitcoin is) using the various markets available out in the world for buying. Transfer the Bitcoins gathered to the Bitcoin address listed below. It does not matter if small amounts or one large amount is transferred, as long as the final value of the Bitcoins is equal to $1,000,000 USD at the time when it is finished. The keys to unlock the data will be purged and what ever is inside the documents will remain a secret forever.
Failure to do this before September 28, the entire world will be allowed to view the documents with a publicly released key to unlock everything.
Bitcoin Address to Stop Release:
1HeF89wMjC48bWNgWvVo7Wu3RaLW8XVsE8
And the same time, the other interested parties will be allowed to compete with you. For those that DO want the documents released will have an different address to send to. If $1,000,000 USD is sent to this account below first; then the encryption keys will be made available to the world right away. So this is an equal opportunity for the documents to remain locked away forever or to be exposed before the September 28 deadline.
Who-ever is the winner does not matter to us.
Bitcoin Address to Promote Full Release:
12AP6iCwRNFQqKLStH3A4b4hw3SL6RaNgB
Cheers!
Reference to avoid Fakes that only you will have.
1.all these considerations did not deter me from the path of duty
2.[t]he moment I understood the will of my Heavenly Father
Here's another:
PWC Office @ 830 Crescent Centre Drive, Suite 260, Franklin, TN 37067
Telephone: [1] (615) 503-2860
Romney's 1040 tax returns were taken from the PWC office 8/25/2012 by gaining access to the third floor via a gentleman working on the 3rd floor of the building. Once on the 3rd floor, the team moved down the stairs to the 2nd floor and setup shop in an empty office room. During the night, suite 260 was entered, and all available 1040 tax forms for Romney were copied. A package was sent to the PWC on suite 260 with a flash drive containing a copy of the 1040 files, plus copies were sent to the Democratic office in the county and copies were sent to the GOP office in the county at the beginning of the week also containing flash drives with copies of Romney's tax returns before 2010. A scanned signature image for Mitt Romney from the 1040 forms were scanned and included with the packages, taken from earlier 1040 tax forms gathered and stored on the flash drives.
The group will release all available files to the public on the 28 of September, 2012
This line is on all the package letters for authenticity of the email being sent.
all these considerations did not deter me from the path of duty