Two Former Cybersecurity Professionals Plead Guilty to Ransomware Attacks in 2023

Two ex-employees of cybersecurity firms have admitted to orchestrating a series of ransomware assaults in 2023, according to the Department of Justice. Ryan Goldberg, 40, a former incident response manager, and Kevin Martin, 36, a former ransomware negotiator, extorted approximately $1.2 million in Bitcoin from a medical device company and targeted multiple other organizations.

The indictment, unsealed in October, also linked an unnamed co-conspirator to the attacks. The trio used ALPHV / BlackCat ransomware — a notorious hacking group employing a ransomware-as-a-service model — to encrypt victims’ data and steal sensitive information. Notably, Martin and the co-conspirator worked as ransomware negotiators at Digital Mint, a cybercrime and incident response company, while Goldberg was employed at Sygnia Cybersecurity Services.

ALPHV / BlackCat is known for its sophisticated malware, which developers maintain and monetize by sharing in the proceeds stolen by cybercriminals. In 2023, the FBI developed a decryption tool aimed at helping victims recover their data from BlackCat attacks. The ransomware has been linked to high-profile incidents involving companies such as Bandai Namco, MGM Resorts, Reddit, and UnitedHealth Group.

According to the DOJ, Goldberg, Martin, and their co-conspirator targeted various U.S. organizations—including a pharmaceutical firm, a medical office, an engineering company, and a drone manufacturer—to demand millions of dollars in ransom.

“These defendants used their sophisticated cybersecurity training and experience to commit ransomware attacks — the very type of crime that they should have been working to stop,” stated Assistant Attorney General A. Tysen Duva. “The Department of Justice is committed to using all tools available to identify and arrest perpetrators of ransomware attacks wherever we have jurisdiction.”

Goldberg and Martin pleaded guilty to conspiracy charges related to obstructing commerce through extortion. Their sentencing is scheduled for March 12, 2026, with penalties potentially reaching 20 years in prison.

Stay updated on similar topics by following relevant sources and authors to receive tailored alerts and news.