Particle.news
Download on the App Store

U.S. Cybersecurity Workers Indicted in Alleged BlackCat Ransomware Attacks

The case highlights insider abuse risks within incident-response and ransom-negotiation roles.

Overview

  • Federal prosecutors charged Kevin Tyler Martin and Ryan Clifford Goldberg, along with an unnamed co-conspirator, with conspiracy to extort and intentional damage to protected computers in the Southern District of Florida.
  • Investigators say the trio acted as ALPHV/BlackCat affiliates to breach at least five U.S. companies between May and November 2023, stealing data and deploying encryption malware, and an FBI affidavit says the conspiracy continued until April 2025.
  • A Tampa medical device firm paid about $1.27 million after a $10 million demand, while targets also included a Maryland pharmaceutical company, a California doctor’s office, a California engineering firm, and a Virginia drone manufacturer.
  • Court records show Goldberg remains in custody as a flight risk, whereas Martin was arrested and released on a $400,000 bond, has pleaded not guilty, and is barred from cybersecurity work pending trial.
  • DigitalMint and Sygnia say the alleged conduct occurred outside their systems, report cooperating with investigators, and state they are not investigative targets.