Cybersecurity Experts Sentenced to Prison for Ransomware Extortion

In a staggering breach of professional ethics that has rocked the cybersecurity industry, two high-level incident responders were sentenced to four years in prison this week for orchestrating covert ransomware attacks against the very types of organizations they were hired to protect. Ryan Goldberg, 40, formerly of the incident response firm Sygnia, and Kevin Martin, 36, a former negotiator for DigitalMint, each pleaded guilty to conspiracy to obstruct commerce by extortion.

The sentencing marks the end of a high-profile federal investigation into a sophisticated "inside job" where the defendants leveraged their specialized knowledge to deploy ALPHV/BlackCat ransomware between April and December 2023. According to federal prosecutors, the duo worked in tandem with a third co-conspirator, Angelo Martino, to exploit their positions of trust. While the group launched multiple attacks, they successfully extorted $1.2 million from a single victim. Assistant Attorney General Andrew Tysen Duva highlighted the calculated cruelty of their operations, noting that the defendants played "hardball" with critical service providers and intentionally leaked sensitive patient data from a medical practice to increase pressure for payment. The case also featured an international manhunt, as FBI Assistant Director Brett Leatherman revealed that Goldberg fled the country prior to his arrest, requiring federal agents to track him through ten different nations before he was ultimately apprehended.

The fallout from the scheme has prompted immediate and drastic changes at DigitalMint, where both Martin and Martino were employed. The company has since implemented rigorous new oversight measures, including a mandate that all negotiations occur on auditable cloud platforms and a new requirement for negotiators to submit their information to the Department of Homeland Security. While Goldberg and Martin begin their four-year terms, the legal saga continues for Martino, who pleaded guilty last week. Martino faces up to 20 years in prison for further complicating the scheme by leaking victim insurance limits to cybercriminals to maximize ransom payouts.