Former Ransomware Negotiator Sentenced for Aiding BlackCat Gang in Extortion Schemes

MIAMI — Angelo John Martino III, a former negotiator for the cybersecurity firm DigitalMint, was sentenced to federal prison on Tuesday after admitting he secretly shared confidential victim data with the BlackCat ransomware group and participated in extortion plots. The sentencing marks a significant development in ongoing efforts by U.S. authorities to dismantle networks that facilitate cyberattacks against American businesses.

Martino III pleaded guilty to conspiracy charges related to his actions between 2024 and early 2026, during which he leveraged his professional position to assist the BlackCat gang, also known as ALPHV. While employed by DigitalMint, a company specializing in ransomware negotiation and remediation, Martino III allegedly accessed sensitive information regarding ongoing attacks on corporate victims. Instead of using this data solely for legitimate resolution efforts, court documents state he transmitted details directly to criminal operators.

The collaboration allowed the BlackCat group to refine their extortion strategies against targeted organizations. By obtaining internal communications and victim vulnerability assessments from Martino III, the gang could pressure companies more effectively, demanding higher ransom payments or threatening public exposure of stolen data with greater precision. Prosecutors described the scheme as a betrayal of trust that exacerbated financial losses for victims already grappling with cyber intrusions.

Martino III's actions were driven by personal financial gain. He received payments from the criminal group in exchange for his insider access and coordination efforts. The indictment detailed how he acted as an intermediary, bridging the gap between legitimate cybersecurity professionals and illicit actors operating outside U.S. borders. His involvement provided BlackCat with a level of insight typically unavailable to external attackers.

The case was prosecuted by federal authorities based out of Florida, where Martino III resided at the time of his arrest. During the proceedings, he expressed remorse for exploiting victims who were already under duress from cybercriminals. The court emphasized that individuals in cybersecurity roles hold a critical responsibility to protect data integrity and prevent further harm during attack incidents.

While Martino III's sentencing concludes one chapter of this investigation, questions remain regarding the full extent of his network within the broader ransomware ecosystem. Authorities have not disclosed whether other negotiators or employees at DigitalMint were involved in similar activities, nor has it been determined if all data shared by Martino III was successfully exploited by BlackCat before his cooperation with law enforcement began.

The Department of Justice continues to monitor digital criminal groups operating under the ALPHV banner. Officials warn that sophisticated ransomware syndicates increasingly seek insiders within cybersecurity firms to gain competitive advantages in their extortion campaigns. As cyber threats evolve, the intersection between defensive operations and offensive exploitation remains a focal point for federal prosecutors seeking to hold facilitators accountable.