A former ransomware negotiator was sentenced to 70 months in prison yesterday after colluding with BlackCat scammers to extort the victims he was hired to protect.
As a ransomware negotiator for the company DigitalMint, Florida resident Angelo Martino’s job was “to negotiate with cybercriminals to mitigate the ransoms paid by [DigitalMint’s] clients,” the US government said in a sentencing memorandum on Tuesday. “Instead, Martino provided the cybercriminals with confidential negotiation information to maximize the ransoms in exchange for a portion of the ransom payments. Five of the victims whom Martino was supposed to help paid over $75 million to ransomware affiliates, including likely millions of dollars in ransom demands inflated as a result of the confidential information provided by Martino.”
Martino, 41, pleaded guilty and asked for a 24-month sentence, noting that he “provided substantial assistance that contributed to the indictment and conviction of two co-defendants.” As described in this November 2025 article, the co-defendants were Texas resident Kevin Martin, a ransomware negotiator for DigitalMint, and Georgia resident Ryan Goldberg, an incident manager at security firm Sygnia.
Martino had not yet been named by authorities when charges against Martin and Goldberg were announced last year. Martin and Goldberg were each sentenced to four years in prison in April 2026.
To compensate victims, Martino must forfeit property and pay 10 percent of any salary he earns after release. The government is due to submit a proposed order of forfeiture by next week.
Martino received millions of dollars in cryptocurrency as proceeds from the conspiracy, according to a factual proffer signed by Martino and US prosecutors. The FBI seized cryptocurrency from Martino, though he had already used much of it to buy two houses in Florida, a boat, and several vehicles.
“Sold out the very victims he was hired to represent”
Martino was charged in February with conspiracy to interfere with interstate commerce by extortion. He faced a maximum sentence of 20 years. The US said that sentencing guidelines based on Martino’s limited criminal history suggest a range of 70 to 87 months, and recommended “a sentence of at least the mid-point of this range.”
Facts Only
* Angelo Martino was sentenced to 70 months in prison.
* The crime involved colluding with BlackCat scammers to extort victims.
* Martino was a ransomware negotiator for DigitalMint.
* Martino provided confidential negotiation information to cybercriminals to maximize ransoms.
* Five victims paid over $75 million to ransomware affiliates.
* Co-defendants included Kevin Martin and Ryan Goldberg.
* Kevin Martin was a ransomware negotiator for DigitalMint.
* Ryan Goldberg was an incident manager at Sygnia.
* Martino faced charges including conspiracy to interfere with interstate commerce by extortion.
* The sentencing guidelines suggested a range of 70 to 87 months.
* Martino must forfeit property and pay 10 percent of post-release earnings.
Executive Summary
Full Take
The sentencing reflects a framework where specialized knowledge is weaponized within criminal ecosystems, creating an asymmetrical power dynamic between the conspirators and their victims. The financial scope of the extortion, reaching over $75 million through inflated ransom demands facilitated by internal negotiation data, underscores how systemic vulnerabilities can be exploited beyond simple monetary loss. Martino's role as an intermediary reveals a critical failure in professional ethics where expertise was leveraged against the interests of those entrusted to protect. The pattern suggests that exploiting technical or negotiating knowledge compounds the harm; the information provided did not just facilitate a crime but actively inflated the financial damage experienced by innocent parties.
This situation prompts examination of the responsibilities inherent in specialized roles within security and negotiation. If negotiators are positioned to manage risk, what ethical and legal boundaries must govern their interactions with illicit actors? Furthermore, how does the penalty structure account for actions that contribute to complex, high-value cybercrime rather than direct execution of attacks? What mechanisms are necessary to ensure that those possessing privileged information are incentivized toward protective action rather than complicity in extortion, and what implications does this have for future regulatory oversight of roles bridging legitimate security work and illicit markets?
Sentinel — Human
The text reads like a standard, fact-focused news report detailing a legal sentencing, exhibiting the predictable structure of human journalistic prose rather than synthetic generation.