CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

BlackCat ransomware affiliate linked to insider-facilitated extortion operations

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

A former incident response negotiator pleaded guilty to conspiring with BlackCat (ALPHV) ransomware affiliates to extort U.S. organizations between 2023 and 2025. The defendant, Angelo Martino, shared confidential victim negotiation positions and insurance policy limits with the ransomware operators to maximize payouts. At least five U.S. organizations were victimized, including a financial services firm that paid $25.66 million and a nonprofit that paid $26.79 million. The operation involved a 20% revenue share paid to BlackCat administrators for access to the ransomware and extortion infrastructure.

Timeline

  1. 21.04.2026 13:12 1 articles · 1h ago

    Former negotiator pleads guilty to facilitating BlackCat ransomware extortion

    Angelo Martino, a former DigitalMint negotiator, pleaded guilty to conspiring with BlackCat (ALPHV) affiliates to extort U.S. organizations between April 2023 and April 2025. Martino shared confidential victim negotiation positions and insurance details with the ransomware operators to inflate ransom demands. At least five U.S. organizations were victimized, including a financial services firm and a nonprofit, with ransoms totaling $25.66 million and $26.79 million respectively.

    Show sources
    Open in new tab

Information Snippets

  • 41-year-old Angelo Martino, a former DigitalMint negotiator, pleaded guilty to conspiring with BlackCat (ALPHV) affiliates to extort U.S. organizations between April 2023 and April 2025.

    First reported: 21.04.2026 13:12
    1 source, 1 article
    Show sources

  • Martino shared confidential victim negotiation positions and insurance policy limits with BlackCat operators to facilitate higher ransom demands.

    First reported: 21.04.2026 13:12
    1 source, 1 article
    Show sources

  • At least five U.S. organizations were victimized, including a financial services firm ($25.66M ransom) and a nonprofit ($26.79M ransom).

    First reported: 21.04.2026 13:12
    1 source, 1 article
    Show sources

  • Martino and two accomplices—Ryan Clifford Goldberg and Kevin Tyler Martin—faced charges including conspiracy to interfere with interstate commerce by extortion and intentional damage to protected computers.

    First reported: 21.04.2026 13:12
    1 source, 1 article
    Show sources

  • The three defendants operated as BlackCat affiliates, demanding payments and threatening data leaks before encryption, while paying a 20% share of ransom proceeds to BlackCat administrators.

    First reported: 21.04.2026 13:12
    1 source, 1 article
    Show sources

  • Martino was initially identified as "Co-Conspirator 1" in an October 2025 indictment but was named in unsealed court documents in March 2026. Goldberg and Martin also pleaded guilty and face up to 20 years in prison.

    First reported: 21.04.2026 13:12
    1 source, 1 article
    Show sources

  • DigitalMint terminated Martino and Martin after discovering their involvement in the scheme, stating the conduct violated company policies and the law.

    First reported: 21.04.2026 13:12
    1 source, 1 article
    Show sources