Former Cybersecurity Experts Admit to Ransomware Crimes

Two ex-cybersecurity professionals have acknowledged their involvement in a string of ransomware incidents occurring in 2023.

On Tuesday, the Department of Justice revealed the admissions of guilt, highlighting how Ryan Goldberg, 40, and Kevin Martin, 36, managed to extort $1.2 million worth of Bitcoin, specifically from a company manufacturing medical devices, while also directing their attacks at numerous other firms.

The Ransomware Scheme and Operations

The criminal charges for Goldberg, Martin, along with a not publicly named accomplice, were brought forth in October. Their operation utilized ALPHV, also known as BlackCat ransomware, to lock and exfiltrate data belonging to their targets.

According to reports from Chicago Sun-Times, Martin and his unnamed partner previously held positions as ransomware negotiators at Digital Mint, a company specializing in cybercrime response strategies. On the other hand, Goldberg served as an incident response manager at Sygnia Cybersecurity Services.

Understanding ALPHV / BlackCat Ransomware

ALPHV / BlackCat represents a cybercriminal group leveraging a ransomware-as-a-service business model. Within this setup, developers offer the ransomware to different cyber gangs, exacting a percentage from the illicit earnings acquired by these perpetrators from their victims.

In 2023, in a bid to combat the fallout from ALPHV / BlackCat activities, the FBI initiated operations aimed at aiding victimized entities in data retrieval.

Criminal Proceedings and DOJ's Role

The indictment from the Department of Justice charges Goldberg, Martin, and their co-actor with seeking multi-million-dollar payments from various sectors, including pharmaceuticals, healthcare, engineering, and drone production.

A statement by Assistant Attorney General A. Tysen Duva underscores the irony of their expertise being used for harm, highlighting the DOJ’s staunch resolve to apprehend and prosecute individuals behind such cybercriminal schemes.

Legal Consequences

Both Goldberg and Martin have been found guilty of plotting to disrupt commerce through extortion tactics. The sentencing is slated for March 12, 2026, with each facing a potential maximum sentence of 20 years.