In a case that has sent shockwaves through the information security community, two American cybersecurity professionals were sentenced to four years each in federal prison on April 30, 2026.
Ryan Goldberg, 40, of Georgia, and Kevin Martin, 36, of Texas, were convicted for their roles in a high-stakes ransomware conspiracy. The pair, who were trained to protect organizations from digital threats, instead leveraged their expertise to deploy the notorious ALPHV BlackCat ransomware against multiple U.S. businesses. +1
Inside the ALPHV BlackCat Machine
ALPHV BlackCat, which emerged in late 2021, represents the “next generation” of ransomware. Written in Rust, it is highly adaptable, allowing it to move seamlessly across Windows, Linux, and VMware environments.
The group operated under a Ransomware-as-a-Service (RaaS) model:
- The Developers: Maintained the sophisticated malware and backend negotiation portals, taking a 20% cut of all proceeds.
- The Affiliates (Goldberg & Martin): Handled the “dirty work” of breaking into networks via stolen credentials and phishing, keeping an 80% share of the ransom.
The “Insider” Dimension: A Double Betrayal
What makes this case particularly egregious was the involvement of a third co-conspirator, Angelo Martino, 41. Martino allegedly worked as a professional ransomware negotiator for victim companies—the very person hired to help organizations recover from attacks.
Instead of helping victims, Martino reportedly passed confidential information about insurance policy limits and internal negotiation strategies directly to the attackers. This allowed Goldberg and Martin to demand the maximum possible ransom. In just one instance, the trio successfully extorted $1.2 million in Bitcoin from a single victim. +1
Global Reach: The FBI Investigation
The FBI’s Miami Field Office led the investigation, which spanned the globe. When Goldberg realized law enforcement was closing in, he attempted to flee the country. The FBI successfully tracked him through 10 different countries before his eventual capture. +1
Federal investigators noted that the group “played hardball” with victims, going so far as to leak sensitive patient data from a doctor’s office when their ransom demands were not met.
The Final Reckoning
While Goldberg and Martin have begun their four-year sentences, the fallout from the ALPHV BlackCat conspiracy continues:
- Angelo Martino: Scheduled for sentencing on July 9, 2026.
- Asset Seizure: The U.S. government has seized more than $10 million in assets linked to the scheme.
- Victim Recovery: The FBI’s previous disruption of ALPHV in late 2023 resulted in a decryption tool that saved victims an estimated $99 million.
