Former DigitalMint Ransomware Negotiator Scammed Clients, Sentenced to 70 Months in Jail

Post Views: 1

A former ransomware negotiation specialist was sentenced to 70 months in prison for orchestrating a $75.3 million extortion scheme involving BlackCat ransomware.

Sentencing and Legal Consequences

Angelo John Martino III received a 70-month prison sentence for orchestrating a ransomware scheme that extorted $75.3 million from five U.S. businesses. The Justice Department revealed that Martino, a former DigitalMint cybersecurity professional, shared confidential data with BlackCat ransomware affiliates to maximize ransom demands.

Role as Ransomware Negotiation Specialist

Martino worked for DigitalMint from 2022 and was involved in negotiations for victims including a nonprofit that paid $26.8 million, a financial services firm that paid $25.7 million, and a hospitality company that paid $16.5 million. Court records show he collaborated with co-conspirators to manipulate negotiation tactics, disclosing insurance policy limits and organizational positions to BlackCat actors.

Exploiting Confidential Data for Ransom Demands

Martino admitted to conspiring with Kevin Tyler Martin and Ryan Clifford Goldberg, a former Sygnia incident response manager, to deploy BlackCat ransomware against additional companies between April and November 2023. The trio split proceeds from a $1.3 million ransom paid by a medical company but failed to secure payments from other targets.

Collaboration with Co-Conspirators

Goldberg and Martin were each sentenced to four years in prison for their roles. Martino’s plea agreement included chats where he advised BlackCat affiliates on negotiation strategies, such as pressuring victims to reveal insurance coverage limits. One victim, a hospitality company, paid $16.5 million after Martino shared details about its financial vulnerabilities.

Impact on Victims and Industry

DigitalMint stated it was unaware of Martino’s criminal activities, claiming he concealed his actions through unauthorized communication channels. The company terminated his employment in 2025 after learning of the investigation. Prosecutors described Martino as a “double agent” who prioritized financial gain over client interests.

“Prosecutors described Martino as a ‘double agent’ who prioritized financial gain over client interests.”

Case Significance and Cybersecurity Implications

Federal authorities seized $10 million in assets linked to Martino, including real estate, vehicles, and cryptocurrency. The Justice Department highlighted the case as an example of the risks associated with ransomware negotiations, noting that backchannel communications often lack oversight. BlackCat, a ransomware group active since 2021, was disrupted in December 2023 when law enforcement seized affiliate sites and deployed decryption tools.

Restitution and Future Proceedings

Martino’s restitution amount will be determined in a court hearing scheduled for September 17. The case underscores the ethical challenges in ransomware response, with officials emphasizing the need for transparency in negotiation practices. Victims described the betrayal as devastating, as the professionals hired to assist them instead facilitated attacks.

Conclusion

Federal prosecutors stressed that the sentence reflects the harm caused by Martino’s actions and reinforces accountability for cybercriminals. The case serves as a stark reminder of the risks posed by insider threats in cybersecurity and the importance of ethical practices in ransomware negotiations.