Archive — US — techcrunch
DOJ accuses US ransomware negotiators of launching their own ransomware attacks
U.S. prosecutors have indicted Kevin Tyler Martin and another rogue employee from DigitalMint for allegedly executing ransomware attacks while negotiating payments for victims. They, along with a third individual, are accused of hacking firms and deploying malicious software from the ALPHV/BlackCat gang, reportedly obtaining over $1.2 million in ransom proceeds from a medical company in Florida.
Key points
- Two employees from DigitalMint indicted for executing their own ransomware attacks.
- Charges include three counts of computer hacking and extortion.
- Attacks targeted at least five U.S.-based companies including a Florida medical device maker and companies in Virginia and Maryland.
- The indicted individuals reportedly received over $1.2 million in ransom payments.
- The ALPHV/BlackCat gang operates under a ransomware-as-a-service model.
- Sygnia terminated an employee, Ryan Clifford Goldberg, upon learning of his involvement.
Why it matters
- The incident spotlights a concerning trend in cybersecurity where insiders misuse their knowledge.
- Ransomware attacks have become increasingly sophisticated, with organized crime adopting business models like ransomware-as-a-service.
- As of 2025, ongoing ransomware threats necessitate businesses to integrate advanced security strategies and employee monitoring.
- This case might shift regulatory approaches to cybersecurity and employee conduct.
The indictment reveals serious ethical breaches among cybersecurity professionals, emphasizing the need for stringent oversight and enhanced security measures as ransomware threats escalate in complexity and frequency.