Third US Security Expert Sentenced to Prison for Helping Ransomware Gang

Another cybersecurity expert from the United States, accused of helping a cybercrime gang while working as a ransomware negotiator, has been sentenced to prison.
Angelo Martino, 41, of Florida, was sentenced on Thursday to 70 months in prison after he pleaded guilty in April.
Martino is one of the three individuals charged by US authorities last year over their role in ransomware attacks. The three men worked at cybersecurity firms, and two of them served as ransomware negotiators tasked with helping victims, but instead they helped the threat actors in return for a share of the ransom.
The other two suspects, Kevin Martin from Texas and Ryan Goldberg from Georgia, were each sentenced to 4 years in prison in late April.
According to investigators, Martino began working with BlackCat/Alphv ransomware operators in April 2023 and helped the hackers extort at least five victims.
The DOJ said Martino was paid by BlackCat to “provide confidential information about the negotiating position and strategy of his employer’s clients and enable the ransomware actors to maximize the ransoms paid by the victims”.
Authorities seized $10 million worth of assets from Martino, including cryptocurrency, vehicles, a food truck, and a fishing boat. Martino will also have to pay restitution, but the amount will be determined in a hearing scheduled for September.
Over 1,000 organizations were targeted in BlackCat ransomware attacks between 2021 and December 2023, when the criminal enterprise was disrupted. A few months later, the hackers received a $22 million ransom from a victim and pulled an exit scam.
The US has been offering $10 million for information leading to the identification of key members of the group.
Related: County Government Reportedly Paid $1 Million to Cyber Extortion Group
Related: Alleged Scattered Spider Hacker Extradited to US
Related: Google, FBI Disrupt NetNut Residential Proxy Network Powered by Millions of Devices

Facts Only

* Angelo Martino, 41, of Florida, was sentenced to 70 months in prison.
* Martino pleaded guilty in April.
* Martino is one of three individuals charged by U.S. authorities regarding ransomware attacks.
* The three men worked at cybersecurity firms.
* Two suspects served as ransomware negotiators who helped threat actors for a share of the ransom.
* Kevin Martin from Texas and Ryan Goldberg from Georgia were each sentenced to four years in prison in late April.
* Martino began working with BlackCat/Alphv ransomware operators in April 2023.
* Martino allegedly helped hackers extort at least five victims.
* The Department of Justice stated Martino was paid by BlackCat for providing confidential information on negotiating strategies.
* Authorities seized $10 million in assets from Martino, including cryptocurrency, vehicles, a food truck, and a fishing boat.
* Restitution amount will be determined in a hearing scheduled for September.

Executive Summary

Angelo Martino, a 41-year-old from Florida, was sentenced to 70 months in prison for pleading guilty. He is one of three individuals charged by U.S. authorities regarding roles in ransomware attacks. The three individuals worked at cybersecurity firms; two acted as ransomware negotiators who allegedly helped threat actors in exchange for ransom shares. Kevin Martin from Texas and Ryan Goldberg from Georgia were each sentenced to four years in prison in late April. Martino began working with BlackCat/Alphv ransomware operators in April 2023, assisting hackers in extorting at least five victims. The Department of Justice stated that Martino was paid by BlackCat to provide confidential information about negotiating strategies to help the actors maximize ransom payments. Authorities seized $10 million in assets from Martino, including cryptocurrency, vehicles, a food truck, and a fishing boat. Restitution is pending determination in a hearing scheduled for September.

Full Take

The narrative presents a stark illustration of how professional expertise can be co-opted to facilitate criminal enterprise. The pattern observed is the exploitation of legitimate skillsets—cybersecurity knowledge and negotiation tactics—by malicious actors, transforming individuals who understand security vulnerabilities into instruments for extortion. This suggests a systemic failure in securing the integrity of the sector, where tools designed for defense are repurposed for offense. The disparity between the reported financial gain to the threat actors (a $22 million ransom paid by one victim) and the accountability imposed on the facilitators highlights the uneven distribution of risk and reward within cybercrime structures. Furthermore, the mention of the U.S. offering $10 million for identification of group members introduces a layer where institutional resources are mobilized against the operators who exploit these same informational flows. The implications point toward a challenge in defining responsibility when illicit activities occur within legitimate professional boundaries. What assumptions about the necessity and security of cybersecurity professionals do we hold regarding their role in the digital economy? And how can legal and operational frameworks adapt to address culpability when specialized knowledge is leveraged for coordinated harm across jurisdictions?

Sentinel — Human

Confidence

The text reads like a straightforward news report detailing specific criminal sentencing and cybercrime logistics with a high degree of factual specificity.

Signals Detected

Sentence length variance is reasonable; the flow is direct and reportorial.

The text presents a clear chain of events with specific details, typical of factual reporting without excessive hedging.

The structure follows a standard news reporting pattern (who, what, when, how) and cites specific legal/financial figures.

No immediate signs of LLM confabulation; the claims tie together known entities (BlackCat, specific sentencing).

Human Indicators

Specific details regarding sentencing amounts, dates (April 2023), and seizure details suggest direct sourcing or rigorous fact-checking typical of journalism.