Cybersecurity Professionals Sentenced for Ransomware Extortion Scheme Two former cybersecurity experts, Ryan Goldberg (40) and Kevin Martin (36), have been sentenced to four years in prison for their roles in a ransomware extortion operation. The sentencing, announced on April 30, 2026, follows their collaboration with the ALPHV (BlackCat) hacking group, where they exploited their industry expertise to orchestrate attacks. Goldberg, an incident response manager, and Martin, a ransomware negotiator, used ALPHV’s ransomware-as-a-service (RaaS) platform to target over 1,000 victims worldwide in 2023, including engineering firms and medical centers. The pair took a 20% cut of ransom payments, employing aggressive tactics such as leaking sensitive patient data to coerce victims into paying. A third accomplice, Angelo Martino (41), pleaded guilty to aiding the scheme by providing hackers with insider information to inflate ransom demands; his sentencing is scheduled for July 9. The group amassed approximately $1.2 million in Bitcoin from a single victim before their operation collapsed in late 2023. The FBI disrupted ALPHV’s network, deploying a decryption tool that allowed hundreds of victims to recover data without paying, preventing an estimated $99 million in ransom payments. Goldberg evaded authorities for months, traveling through 10 countries before being apprehended in Mexico City. The U.S. Department of Justice emphasized that the four-year sentences reflect the severity of their crimes, highlighting how the defendants abused their technical skills for financial gain.

Two U.S. Cybersecurity Professionals Sentenced for ALPHV BlackCat Ransomware Attacks The U.S. Department of Justice (DOJ) has sentenced two former cybersecurity professionals to four years in federal prison for their roles in ALPHV BlackCat ransomware attacks targeting U.S. organizations in 2023. Ryan Goldberg (40, Georgia) and Kevin Martin (36, Texas) pleaded guilty to conspiracy to obstruct commerce through extortion, alongside a third co-conspirator, Angelo Martino (41, Florida). Operating as affiliates within the ALPHV BlackCat ransomware-as-a-service (RaaS) ecosystem, the trio deployed the ransomware between April and December 2023, extorting approximately $1.2 million in Bitcoin from at least one victim. They retained 80% of the ransom, splitting the proceeds evenly, while laundering the funds to conceal their origins. Their attacks disrupted critical sectors, including healthcare and engineering, and led to the exposure of sensitive patient data. What sets this case apart is the attackers’ professional backgrounds they leveraged their cybersecurity expertise to bypass defensive measures, amplifying the sophistication and impact of their attacks. ALPHV BlackCat, known for its double-extortion tactics, has been linked to over 1,000 global victims. The group encrypts systems while exfiltrating data to pressure victims into paying ransoms. The sentencing follows a December 2023 FBI operation that disrupted ALPHV’s infrastructure, seized websites, and released a decryption tool, saving organizations an estimated $99 million in potential ransom payments. Goldberg and Martin pleaded guilty in December 2025, while Martino who also acted as a ransomware negotiator and leaked victim data to escalate demands is scheduled for sentencing on July 9, 2026. The FBI Miami Field Office led the investigation, with support from the U.S. Secret Service and international partners. Authorities tracked Goldberg across 10 countries as he attempted to evade arrest, highlighting the global effort to combat cybercrime. The DOJ’s Computer Crime and Intellectual Property Section (CCIPS), which prosecuted the case, has secured over 180 convictions and recovered more than $350 million in stolen funds since 2020. This case underscores the growing threat of insider expertise being weaponized in ransomware operations and reinforces law enforcement’s commitment to prosecuting cybercriminals regardless of their background or location.