DOJ Charges Former DigitalMint Negotiator in Alleged BlackCat Extortion Scheme
Summary
The DOJ charged former DigitalMint negotiator Angelo Martino with extortion conspiracy, alleging he shared confidential negotiation details with BlackCat and took part in attacks on at least five U.S. organizations. DigitalMint says it cooperated and strengthened its s(
Key points
- Angelo Martino surrendered to U.S. Marshals and faces one count of conspiracy to interfere with interstate commerce by extortion.
- Prosecutors allege Martino shared confidential ransomware negotiation information with BlackCat operators while working at DigitalMint.
- Court documents allege Martino, Kevin Tyler Martin and Ryan Goldberg participated in ransomware attacks between April 2023 and April 2025.
- The alleged scheme targeted at least five U.S. organizations; a Tampa-area medical device manufacturer reportedly paid $1.27 million.
- Prosecutors allege the defendants paid BlackCat administrators 20% of collected ransoms in exchange for access to ransomware and an extortion portal.
- DigitalMint says it terminated the implicated employees, cooperated with law enforcement and strengthened internal safeguards.
Article Details
- Event Type
- U.S. criminal charge alleging insider collaboration with the BlackCat ransomware operation
- Impact
- Prosecutors allege Angelo Martino shared confidential negotiation information with BlackCat operators and participated in ransomware attacks with accomplices from April 2023 to April 2025. The alleged attacks affected at least five U.S. organizations; a Tampa-based medical device manufacturer paid a $1.27 million ransom. The defendants allegedly threatened to leak stolen data and paid BlackCat administrators a 20% share of collected ransoms.
People
Threat Actors
Angelo MartinoProsecutors allege that Martino, while working as a ransomware negotiator at DigitalMint, shared confidential negotiation information with BlackCat operators and participated in ransomware attacks. He was charged with conspiracy to interfere with interstate commerce by extortion.BlackCatRansomware operation that prosecutors allege partnered with the defendants, providing access to ransomware and an extortion portal in exchange for a share of collected ransoms. The source also identifies BlackCat as ALPHV.Kevin Tyler MartinIdentified as a former DigitalMint employee who allegedly participated in ransomware attacks with Martino and Ryan Goldberg. The article says Martin pleaded guilty to charges in an earlier indictment.Ryan GoldbergIdentified as a former Sygnia incident response manager who allegedly participated in ransomware attacks with Martino and Kevin Tyler Martin. The article says Goldberg pleaded guilty to charges in an earlier indictment.