Particle.news
Download on the App Store

Ex-Cybersecurity Workers Indicted Over BlackCat Ransomware Attacks on U.S. Firms

Prosecutors allege the former responders acted as ALPHV affiliates, highlighting insider risk in the ransomware-response business.

Overview

  • Kevin Tyler Martin of Texas and Ryan Clifford Goldberg of Georgia were charged in the Southern District of Florida with conspiracy to extort and intentional damage to protected computers.
  • Goldberg is reported held in federal custody, while Martin has pleaded not guilty and was released on bond.
  • Prosecutors say the pair targeted five companies, including a Tampa medical device maker that paid about $1.27 million after a $10 million demand, with other alleged victims in Maryland, California and Virginia.
  • DigitalMint and Sygnia say they are not investigation targets, have terminated the implicated employees, and are cooperating with law enforcement.
  • Public records differ on timing, with the indictment describing 2023 attacks and an FBI affidavit indicating activity continued into April 2025, and the affidavit also describes cryptocurrency funds routed through a mixing service.