Insider scheme extracted over $75 million in ransom payments from U.S. companies.
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .
Angelo Martino, a 41-year-old former ransomware negotiator at the incident response firm DigitalMint, has pleaded guilty to conspiring with the ALPHV/BlackCat ransomware gang to extort five U.S. companies whose data his employer had been hired to protect, the Department of Justice announced on Monday.
Martino, of Land O’Lakes, Florida, is the third and final member of a trio of cybersecurity professionals charged in the scheme; his co-conspirators, Ryan Clifford Goldberg and Kevin Tyler Martin, pleaded guilty in December . Newly unsealed court filings put the total ransom payments across the insider-assisted attacks at more than $75 million, with two of the payments individually exceeding $25 million.
Starting in April 2023, Martino used his position as a negotiator to feed BlackCat operators confidential details about the five victim companies he was representing, according to the DOJ. That information included the victims' cyber insurance policy limits and details about how the negotiations were being perceived internally, giving the attackers a precise picture of exactly how much each target could afford to pay.
You may like Bug in Nitrogen ransomware locks victims' data away forever FBI arrests crypto thief accused of stealing $46 million from seized government wallets Hacker charged for stealing $53 million in crypto, faces up to 30 years in prison According to the unsealed court filings, a nonprofit victim paid a ransom worth nearly $26.8 million in cryptocurrency, a financial services company paid more than $25.6 million, and a hospitality company paid $16.5 million. A retail company paid $6.1 million, and a medical company paid $213,000.
Separately from the insider-assisted attacks, Martino also admitted to joining Goldberg and Martin in directly deploying BlackCat ransomware against additional U.S. victims between April and November 2023. Per an October 2025 indictment, the trio demanded more than $16 million in ransom from those attacks. One confirmed payment from a medical device company netted the group $1.274 million, which they split three ways after paying BlackCat's operators a cut.
Meanwhile, law enforcement has seized more than $10 million from Martino, including $9.2 million in cryptocurrency, two properties, a trailer, a luxury fishing boat, and two motor vehicles, including a 1999 Nissan Skyline, all of which were purchased with illicit proceeds.
"Angelo Martino's clients trusted him to respond to ransomware threats and help thwart and remedy them on behalf of victims," Assistant Attorney General A. Tysen Duva said in the DOJ’s statement. "Instead, he betrayed them and began launching ransomware attacks himself by assisting cybercriminals and harming victims, his own employer, and the cyber incident response industry itself."
Get Tom's Hardware's best news and in-depth reviews, straight to your inbox.
Key considerations
- Investor positioning can change fast
- Volatility remains possible near catalysts
- Macro rates and liquidity can dominate flows
Reference reading
- https://www.tomshardware.com/tech-industry/cyber-security/SPONSORED_LINK_URL
- https://www.tomshardware.com/tech-industry/cyber-security/florida-man-pleads-guilty-after-leaking-victims-insurance-details-to-blackcat-hackers#main
- https://www.tomshardware.com
- Grab 32GB of Corsair DDR5 RAM for just $28 in this Newegg combo with the new 9950X3D2 that saves you a huge $441 — $1,729.99 deal with AMD's first dual-X3D CPU
- Xbox outlines broad plan to revitalize brand with a back-to-basics approach that focuses on console — New Xbox strategy reprioritizes console, while bolstering
- U.S. Commerce Secretary says Nvidia still hasn't sold any H200 AI GPUs to China — Chinese government is blocking imports in an attempt to push domestic semicond
- Linux may be ending support for older network drivers due to influx of false AI-generated bug reports — maintenance has become too burdensome for old largely-un
- Strength and Destiny Collide: ‘Samson: A Tyndalston Story’ Arrives in the Cloud
Informational only. No financial advice. Do your own research.