Former U.S. Ransomware Negotiator Admits to Conspiring with BlackCat Group
AI-generated from multiple sources. Verify before acting on this reporting.
MIAMI — Angelo Martino, a former U.S. ransomware negotiator, admitted on Monday to conspiring with the BlackCat ransomware group to extort American companies, sharing sensitive client information and deploying ransomware attacks. The admission marks a significant development in ongoing federal investigations into cybercrime rings targeting U.S. infrastructure and private sector entities.
Martino, alongside co-defendants Ryan Goldberg and Kevin Martin, faces charges related to a coordinated campaign that exploited insider knowledge to facilitate cyberattacks. The trio allegedly leveraged Martino's background in cybersecurity negotiations to identify vulnerable targets and execute extortion schemes. Prosecutors stated that the defendants abused their professional expertise to profit from ransom payments, undermining trust in the very mechanisms designed to mitigate cyber threats.
The criminal activity spanned multiple states, with operations centered in Florida, Georgia, and Texas. Authorities described a pattern of targeting corporations across various industries, including healthcare, finance, and manufacturing. The BlackCat group, known for its sophisticated ransomware-as-a-service model, allegedly partnered with Martino to gain access to confidential data, which was then used to pressure victims into paying substantial ransoms.
Martino's role as a former negotiator provided the group with critical insights into corporate security protocols and negotiation tactics. By sharing sensitive client information, the defendants were able to tailor their attacks to maximize impact and minimize detection. The scheme reportedly involved deploying ransomware that encrypted critical systems, forcing companies to choose between paying for decryption keys or facing prolonged operational disruptions.
Federal agents arrested the three individuals in a coordinated sweep across the Southeastern United States. Martino was taken into custody in Florida, while Goldberg and Martin were apprehended in Georgia and Texas, respectively. The arrests were part of a broader effort to dismantle networks involved in cyber extortion and protect U.S. businesses from escalating digital threats.
Legal proceedings are expected to begin in the coming weeks, with prosecutors seeking to establish the full scope of the conspiracy and the financial damages incurred by victim organizations. The case has drawn attention from cybersecurity experts and government officials, who have highlighted the dangers posed by insiders with access to sensitive information.
Questions remain regarding the extent of the group's operations and whether other accomplices are still at large. Investigators have not disclosed the total number of companies targeted or the aggregate amount of ransom demands. As the case develops, authorities are expected to release further details about the methods used and the impact on affected organizations. The outcome of the trial could set a precedent for handling cases involving former cybersecurity professionals who turn to criminal activities.