(cyberscoop.com) Former Incident Responders Sentenced to Prison for Orchestrating ALPHV/BlackCat Ransomware Attacks
Two former cybersecurity professionals, Ryan Clifford Goldberg and Kevin Tyler Martin, sentenced to 4 years for orchestrating ALPHV/BlackCat ransomware attacks. Insiders exploited IR and negotiation roles to extort U.S. medical, pharma, and engineering firms.
In brief - Former incident responders abused trusted roles to deploy ALPHV/BlackCat ransomware, targeting critical sectors. Case highlights insider threats in cybersecurity and risks in ransomware negotiation practices.
Technically - Attackers leveraged ALPHV/BlackCat ransomware, known for healthcare sector targeting, to encrypt systems and exfiltrate data. Coordinated with negotiator Angelo John Martino III to maximize extortion. Demonstrates operational risks of insiders with privileged access and challenges in detecting such threats.
Source: https://cyberscoop.com/incident-responders-ryan-goldberg-kevin-martin-sentenced-ransomware/
#Cybersecurity #ThreatIntel
O RLY CYBER
npub1sh…0kwr0
2026-04-30 23:53:35 UTC
Author Public Key
npub1shlut8mwdmfevu2nt294apayu7e0mxs5mrpfyq8v5ru4ymscg9ysx0kwr0Seen on
wss://relay.momostr.pinkPublished at
2026-04-30 23:53:35 UTCEvent JSON
{
"id": "d0e6a0431cb450ad39e7100378533aa6bd2f17abd82284d7c6a5271df54f3d66",
"pubkey": "85ffc59f6e6ed39671535a8b5e87a4e7b2fd9a14d8c29200eca0f9526e184149",
"created_at": 1777593215,
"kind": 1,
"tags": [
[
"proxy",
"https://swecyb.com/@orlysec/116496348959529133",
"web"
],
[
"t",
"threatintel"
],
[
"t",
"cybersecurity"
],
[
"proxy",
"https://swecyb.com/ap/users/116080658609901341/statuses/116496348959529133",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://swecyb.com/ap/users/116080658609901341/statuses/116496348959529133",
"pink.momostr"
],
[
"-"
]
],
"content": "(cyberscoop.com) Former Incident Responders Sentenced to Prison for Orchestrating ALPHV/BlackCat Ransomware Attacks\n\nTwo former cybersecurity professionals, Ryan Clifford Goldberg and Kevin Tyler Martin, sentenced to 4 years for orchestrating ALPHV/BlackCat ransomware attacks. Insiders exploited IR and negotiation roles to extort U.S. medical, pharma, and engineering firms.\n\nIn brief - Former incident responders abused trusted roles to deploy ALPHV/BlackCat ransomware, targeting critical sectors. Case highlights insider threats in cybersecurity and risks in ransomware negotiation practices.\n\nTechnically - Attackers leveraged ALPHV/BlackCat ransomware, known for healthcare sector targeting, to encrypt systems and exfiltrate data. Coordinated with negotiator Angelo John Martino III to maximize extortion. Demonstrates operational risks of insiders with privileged access and challenges in detecting such threats.\n\nSource: https://cyberscoop.com/incident-responders-ryan-goldberg-kevin-martin-sentenced-ransomware/\n\n#Cybersecurity #ThreatIntel",
"sig": "8ef9c3c16cbd79a124a02c7db576e415418352af9910e43509d4da3ea667d73e770821fb25e4792cb72c53ed48301417c45d4a2118e8d07837c72872b29b951d"
}