Mark RadarMARK RADAR
EN
Event File CRYPTO Ransomware

Former DigitalMint and Sygnia Cybersecurity Experts Sentenced for Colluding With ALPHV Ransomware Group

1 reports · First detected 2026-05-01 · Last active 2026-05-01

ALPHV, also known as BlackCat, recruited affiliates under a ransomware-as-a-service model, with its operators taking a 20% cut of ransom payments. DigitalMint negotiator Kevin Martin and Sygnia incident-response manager Ryan Goldberg instead used their cybersecurity expertise to attack companies. The case highlights the insider risks created when consultants have access to clients’ systems, negotiations and insurance information.

The U.S. Department of Justice said the pair worked with Angelo Martino to attack several U.S. organizations between April and December 2023, obtaining about $1.2 million in ransom from one victim. On April 30, 2026, a federal court in the Southern District of Florida sentenced Martin and Goldberg to four years in prison each. In the broader insider-assistance case involving Martino, five clients paid more than $75 million in ransom in total.

All Coverage

1 original reports

The Backstory

The history behind this event

No historical echoes for this signal

Mark Radar|MARK RADAR