INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Former ransomware negotiator gets 4 years for BlackCat attacks

| 2026-07-10 08:17 HIGH HIGH RANSOMWARE & EXTORTION DATA BREACH
JSON
Executive Summary
AI-generated
A former employee of cybersecurity incident response company DigitalMint, Angelo Martino, was sentenced to 70 months in prison for his role in targeting U.S. companies in BlackCat (ALPHV) ransomware attacks between April 2023 and April 2025. The FBI linked the BlackCat ransomware gang to more than 60 breaches between November 2021 and March 2022, with the cybercrime group collecting at least $300 million in ransom payments from over 1,000 victims through September 2023. Martino was directly involved in these attacks alongside accomplices Ryan Goldberg and Kevin Tyler Martin, who also received prison sentences for their roles. The attackers used BlackCat to demand ransom payments and threatened to leak stolen data before encrypting their systems, with the three former employees sharing confidential information about victims' insurance policy limits and negotiation positions to maximize extortion demands from at least five U.S. organizations.
Technical Mitigations AI-generated
• Use a 20% share reduction for ransomware admins to limit their access and control. • Implement breach and attack simulation tests on SIEM and EDR rules to detect unseen threats. • Monitor insurance policy limits and negotiation positions to prevent extortion.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
BlackCatBlackCatALPHVALPHV
Target & Sectors
Global Scope financefinance
Incident Timeline
‎2026/07/10
A former employee of DigitalMint was sentenced to 4 years in prison for sharing confidential information about victims' insurance policy limits and negotiation positions with BlackCat ransomware operators.
financial $300 group
The FBI linked the BlackCat ransomware gang to more than 60 breaches between November 2021 and March 2022, adding in a separate advisory that the cybercrime group had collected at least $300 million in ransom payments from more than 1,000 victim…
victims 1,000 victims
…t ransomware gang to more than 60 breaches between November 2021 and March 2022, adding in a separate advisory that the cybercrime group had collected at least $300 million in ransom payments from more than 1,000 victims through September 2023.
financial $25,660,000 firm
Their victims include at least five U.S. organizations, including a financial services firm that paid $25,660,000 and a nonprofit that paid a $26,793,000 ransom, as well as school districts, medical facilities, law firms, and other financial service…
financial $26,793,000 $ ransom
Their victims include at least five U.S. organizations, including a financial services firm that paid $25,660,000 and a nonprofit that paid a $26,793,000 ransom, as well as school districts, medical facilities, law firms, and other financial service…
Tactical Metrics
Metrics
financial
300,000,000
Group
The FBI linked the BlackCat ransomware gang to more than 60 breaches between November 2021 and March 2022, adding in a separate advisory that the cybercrime group had collected at least $300 million in ransom payments from more than 1,000 victim…
Metrics
victims
1,000
Victims
…t ransomware gang to more than 60 breaches between November 2021 and March 2022, adding in a separate advisory that the cybercrime group had collected at least $300 million in ransom payments from more than 1,000 victims through September 2023.
Metrics
financial
25,660,000
Firm
Their victims include at least five U.S. organizations, including a financial services firm that paid $25,660,000 and a nonprofit that paid a $26,793,000 ransom, as well as school districts, medical facilities, law firms, and other financial service…
Metrics
financial
26,793,000
$ Ransom
Their victims include at least five U.S. organizations, including a financial services firm that paid $25,660,000 and a nonprofit that paid a $26,793,000 ransom, as well as school districts, medical facilities, law firms, and other financial service…
Intelligence Sources
BleepingComputer 2026-07-10