BlackCat campaign expands across multiple victims
Campaign
Summary
Hide ▲
Show ▼
The BlackCat ransomware operation ran a multi-victim extortion campaign against US organizations between April and November 2023, creating sustained ransom pressure across multiple sectors. Angelo Martino later admitted he helped the group by sharing victim negotiation details, including insurance limits and internal positions, to improve payout leverage. He also conspired with Ryan Goldberg and Kevin Martin to deploy ransomware, effectively acting as a BlackCat affiliate. Victims included hospitality, financial services, non-profit, retail, manufacturing, medical, engineering, and pharmaceutical organizations.
Related Happenings
Conti campaign expands across multiple victims
Campaign
H score38
First: 12.06.2026 20:54
Last: 12.06.2026 20:54
Sources 1
About this happening:
The **Conti ransomware operation** ran as a large-scale **2021-2022** extortion campaign that **stole data** and **encrypted devices** to pressure victims into paying **Bitcoin**....
Conti campaign expands across multiple victims
CampaignAbout this happening: The **Conti ransomware operation** ran as a large-scale **2021-2022** extortion campaign that **stole data** and **encrypted devices** to pressure victims into paying **Bitcoin**....
U.S. sentencing of Deniss Zolotarjovs in Karakurt ransomware case
Law Enforcement
H score39
First: 05.05.2026 13:13
Last: 05.05.2026 13:13
Sources 1
About this happening:
**Deniss Zolotarjovs** was **sentenced to 8.5 years in prison** in the **United States** for serving as a **Karakurt ransomware** negotiator, resolving a cross-border cybercrime c...
U.S. sentencing of Deniss Zolotarjovs in Karakurt ransomware case
Law EnforcementAbout this happening: **Deniss Zolotarjovs** was **sentenced to 8.5 years in prison** in the **United States** for serving as a **Karakurt ransomware** negotiator, resolving a cross-border cybercrime c...
U.S. sentencing of Ryan Clifford Goldberg and Kevin Tyler Martin in BlackCat ransomware case
Law Enforcement
H score45
First: 01.05.2026 10:47
Last: 01.05.2026 10:47
Sources 1
How related:
Two former employees of cybersecurity incident response companies Sygnia and DigitalMint were sentenced to four years in prison each for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks.
About this happening:
**Ryan Clifford Goldberg** and **Kevin Tyler Martin**, former employees of **Sygnia** and **DigitalMint**, were sentenced in a **BlackCat (ALPHV) ransomware** law-enforcement case...
U.S. sentencing of Ryan Clifford Goldberg and Kevin Tyler Martin in BlackCat ransomware case
Law EnforcementHow related: Two former employees of cybersecurity incident response companies Sygnia and DigitalMint were sentenced to four years in prison each for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks.
About this happening: **Ryan Clifford Goldberg** and **Kevin Tyler Martin**, former employees of **Sygnia** and **DigitalMint**, were sentenced in a **BlackCat (ALPHV) ransomware** law-enforcement case...
Tampa medical device company hit by ransomware attack linked to BlackCat (ALPHV)
Incident
H score45
First: 01.05.2026 10:47
Last: 01.05.2026 10:47
Sources 1
How related:
Prosecutors said the Tampa medical device company paid $1.27 million after its servers were encrypted and it received a $10 million ransom demand in May 2023, with the payment laundered and split three ways with Martino.
About this happening:
A **Tampa medical device company** suffered a **ransomware intrusion** in **May 2023** that encrypted its servers and triggered a **$10 million** ransom demand. The company later...
Tampa medical device company hit by ransomware attack linked to BlackCat (ALPHV)
IncidentHow related: Prosecutors said the Tampa medical device company paid $1.27 million after its servers were encrypted and it received a $10 million ransom demand in May 2023, with the payment laundered and split three ways with Martino.
About this happening: A **Tampa medical device company** suffered a **ransomware intrusion** in **May 2023** that encrypted its servers and triggered a **$10 million** ransom demand. The company later...
Albanian scam call centers investment-fraud campaign
Campaign
H score29
First: 30.04.2026 13:00
Last: 30.04.2026 13:00
Sources 1
About this happening:
A **two-year investment-fraud campaign** tied to **Albanian scam call centers** has been disrupted after **10 arrests**, revealing a coordinated operation that allegedly stole **a...
Albanian scam call centers investment-fraud campaign
CampaignAbout this happening: A **two-year investment-fraud campaign** tied to **Albanian scam call centers** has been disrupted after **10 arrests**, revealing a coordinated operation that allegedly stole **a...
Timeline
-
01.05.2026 14:30 1 articles · 2mo ago
U.S. workers sentenced for BlackCat ransomware roles
Legal Policy Action UpdateRyan Goldberg and Kevin Martin were each sentenced to four years in prison for helping the BlackCat/ALPHV ransomware gang conduct attacks against multiple U.S. organizations during 2023. Prosecutors said the pair worked alongside Angelo Martino, paid BlackCat administrators a 20% share of ransom payments, and in one case received a Bitcoin ransom worth $1.2m while also leaking patient data from a healthcare victim.
Show sources
- Two American Cybersecurity Workers Jailed for BlackCat Ransomware Attacks — www.infosecurity-magazine.com — 01.05.2026 14:30
-
22.04.2026 14:00 1 articles · 2mo ago
BlackCat campaign expands across multiple victims
Initial DisclosureIn **April 2023**, **Angelo Martino** began colluding with **BlackCat** while working as a ransomware negotiator. He then shared victim negotiation information that could help the group maximize extortion demands.
Show sources
- Former Ransomware Negotiator Pleads Guilty to Working For BlackCat Cyber Gang — www.infosecurity-magazine.com — 22.04.2026 14:00