Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Third US Security Expert Admits Helping Ransomware Gang

Angelo Martino of Florida has pleaded guilty to collaborating with the BlackCat cybercrime group while working as a ransomware negotiator.

Hacker

A third man has pleaded guilty to participating in ransomware attacks while working for a cybersecurity company hired to negotiate with hackers.

In October 2025, the US announced charges against three individuals for allegedly conducting ransomware attacks against several companies. Authorities said the suspects were tasked with helping victims, but instead they helped the attackers in return for a share of the ransom.

Two of the suspects, Kevin Martin from Texas and Ryan Goldberg from Georgia, pleaded guilty in late 2025 and await sentencing, scheduled for the end of April.

The identity of the third individual was only revealed in March 2026. He is 41-year-old Angelo Martino from Florida, who worked with Martin as a ransomware negotiator at an incident response firm. Goldberg worked for a different cybersecurity company.

Martino has now also pleaded guilty and, similar to Goldberg and Martin, faces up to 20 years in prison.

According to the Justice Department, Martino abused his role as a ransomware negotiator for five companies by providing the BlackCat/Alphv cybercrime group with information useful in negotiating a ransom payment. 

Advertisement. Scroll to continue reading.

“This confidential information assisted the ransomware actors and maximized the ransoms that the victims were required to pay. The BlackCat actors paid Martino for this confidential information,” the DOJ said.

Law enforcement has seized $10 million worth of assets from Martino.

Over 1,000 organizations were targeted in BlackCat ransomware attacks between November 2021 and December 2023, when the operation was disrupted by law enforcement. The cybercriminals continued operating for a few more months until they received a $22 million ransom, then pulled an exit scam.

The US has been offering a $10 million reward for information on key members of the BlackCat group, but no charges have been announced to date.    

Related: British Scattered Spider Hacker Pleads Guilty in the US

Related: Another DraftKings Hacker Sentenced to Prison

Related: Two North Korean IT Worker Scheme Facilitators Jailed in the US

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

Explore how attackers are using AI to scale threats and how security teams can respond with AI-driven defenses. Protecting against unmonitored use of generative AI (Shadow AI) in business units and building and enforcing AI governance frameworks.

Register

People on the Move

Opal Security has appointed CPO, CTO, VP of Field Engineering, VP of Marketing, and Head of Product and Solutions Marketing.

The Department of the Air Force has appointed Ashley Devoto as Chief Information Officer.

Bartley Richardson has been named Chief AI and Autonomous Systems Officer at CrowdStrike.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.