US ransomware negotiators get 4 years in prison over BlackCat attacks

Two former cybersecurity professionals — Ryan Goldberg (Sygnia) and Kevin Martin (DigitalMint) — were each sentenced to four years in prison for acting as BlackCat (ALPHV) ransomware affiliates. Between May and November 2023, they and a third accomplice breached multiple U.S. companies, paying a 20% cut of ransoms for access to BlackCat's platform. Victims included a pharmaceutical company, a medical device manufacturer, and others who received ransom demands ranging from $300,000 to $10 million. One Tampa company paid $1.27 million after a $10 million demand. The case highlights insider threats within the cybersecurity industry, where trusted professionals exploited their knowledge to extort the very clients they were meant to protect.