Find notable cyber news and cases, enriched with sources, timelines, and signals.

Angelo Martino DOJ charge in BlackCat insider ransomware scheme

Law Enforcement
First reported
Last updated
Happening score
H score 37
2 unique sources, 2 articles

Summary

Hide ▲

Ryan Goldberg and Kevin Martin were sentenced to four years in prison for helping BlackCat (ALPHV) carry out ransomware attacks against multiple U.S. organizations in 2023. The DOJ said the two former cybersecurity workers collaborated with Angelo Martino, shared proceeds with BlackCat administrators, and in one case received a Bitcoin ransom worth $1.2m; prosecutors also said patient data was leaked in a healthcare-sector attack.

Related Happenings

U.S. sentencing of Deniss Zolotarjovs in Karakurt ransomware case

Law Enforcement
First: 05.05.2026 13:13 Last: 05.05.2026 13:13 Sources 1

About this happening: **Deniss Zolotarjovs** was **sentenced to 8.5 years in prison** in the **United States** for serving as a **Karakurt ransomware** negotiator, resolving a cross-border cybercrime c...

U.S. sentencing of Ryan Clifford Goldberg and Kevin Tyler Martin in BlackCat ransomware case

Law Enforcement
First: 01.05.2026 10:47 Last: 01.05.2026 10:47 Sources 1

About this happening: **Ryan Clifford Goldberg** and **Kevin Tyler Martin**, former employees of **Sygnia** and **DigitalMint**, were sentenced in a **BlackCat (ALPHV) ransomware** law-enforcement case...

Tampa medical device company hit by ransomware attack linked to BlackCat (ALPHV)

Incident
First: 01.05.2026 10:47 Last: 01.05.2026 10:47 Sources 1

About this happening: A **Tampa medical device company** suffered a **ransomware intrusion** in **May 2023** that encrypted its servers and triggered a **$10 million** ransom demand. The company later...

Finnish arrest and U.S. charges in Bouquet Scattered Spider case

Law Enforcement
First: 28.04.2026 18:39 Last: 28.04.2026 18:39 Sources 1

About this happening: **Finnish law enforcement** arrested **Bouquet**, and **U.S. federal prosecutors** later charged him in a cross-border **Scattered Spider** cybercrime case. The charges include **...

BlackCat campaign expands across multiple victims

Campaign
First: 22.04.2026 14:00 Last: 22.04.2026 14:00 Sources 1

How related: He also admitted to conspiring with Ryan Goldberg of Georgia and Kevin Martin of Texas to deploy ransomware against various US victims between April and November 2023 – effectively working as a BlackCat affiliate.

About this happening: The **BlackCat** ransomware operation ran a **multi-victim extortion campaign** against **US organizations** between **April and November 2023**, creating sustained ransom pressur...

Latest development: 01.05.2026 14:30

Ryan Goldberg and Kevin Martin were each sentenced to four years in prison for helping the BlackCat/ALPHV ransomware gang conduct attacks against multiple U.S. organizations during 2023. Prosecutors said the pair worked alongside Angelo Martino, paid BlackCat administrators a 20% share of ransom payments, and in one case received a Bitcoin ransom worth $1.2m while also leaking patient data from a healthcare victim.

Timeline

  1. 01.05.2026 14:30 1 articles · 26d ago

    Ryan Goldberg and Kevin Martin sentenced for BlackCat attacks

    Legal Policy Action Update

    Ryan Goldberg and Kevin Martin were each sentenced to four years in prison for helping BlackCat/ALPHV conduct ransomware attacks against multiple U.S. organizations. Court documents say they worked with Angelo Martino, shared ransom proceeds with BlackCat administrators, and in one case received a Bitcoin ransom worth $1.2m; prosecutors also said patient data was leaked in a healthcare-sector attack.

    Show sources
  2. 12.03.2026 13:31 2 articles · 2mo ago

    Angelo Martino DOJ charge in BlackCat insider ransomware scheme

    Initial Disclosure

    A former **DigitalMint** employee was taken into custody and charged after investigators alleged he helped support a **BlackCat (ALPHV)** ransomware extortion scheme. The legal case centers on insider access to negotiation information and alleged participation in ransom-driven attacks.

    Show sources