\n<\/p>\n
Two former employees at cybersecurity firms \u2014 one of whom was a ransomware negotiator \u2014 have pleaded guilty to carrying out a series of ransomware attacks in 2023. The Department of Justice announced the guilty pleas<\/a> on Tuesday, saying 40-year-old Ryan Goldberg and 36-year-old Kevin Martin extorted $1.2 million in Bitcoin from a medical device company and targeted several others.<\/p>\n<\/div>\n Goldberg, Martin, and an unnamed co-conspirator were indicted for the attacks in October<\/a>, which involved using ALPHV \/ BlackCat ransomware to encrypt and steal data from their victims. As reported by the Chicago Sun-Times<\/em><\/a>, Martin and the third conspirator worked as ransomware negotiators at Digital Mint, a cybercrime and incident response company, while Goldberg was an incident response manager at Sygnia Cybersecurity Services.<\/p>\n<\/div>\n ALPHV \/ BlackCat is a hacker group that uses a ransomware-as-a-service model, with the developers who maintain the malware often taking a cut of stolen funds from the cybercriminals who use it to target victims. In 2023, the FBI developed a decryption tool<\/a> designed to recover data from victims of ALPHV \/ BlackCat, which has been linked to high-profile attacks on companies like Bandai Namco<\/a>, MGM Resorts<\/a>, Reddit<\/a>, and UnitedHealth Group<\/a>.<\/p>\n<\/div>\n The DOJ\u2019s indictment claims Goldberg, Martin, and the co-conspirator used the ransomware in an attempt to extort millions of dollars from victims throughout the US, including a pharmaceutical company, a doctor\u2019s office, an engineering company, and a drone manufacturer.<\/p>\n<\/div>\n \u201cThese defendants used their sophisticated cybersecurity training and experience to commit ransomware attacks \u2014 the very type of crime that they should have been working to stop,\u201d Assistant Attorney General A. Tysen Duva of the DOJ\u2019s Criminal Division says in a statement. \u201cThe Department of Justice is committed to using all tools available to identify and arrest perpetrators of ransomware attacks wherever we have jurisdiction.\u201d<\/p>\n<\/div>\n Goldberg and Martin pleaded guilty to one count of \u201cconspiracy to obstruct, delay, or affect commerce or the movement of any article or commodity in commerce by extortion.\u201d Their sentencing is scheduled for March 12th, 2026, where they\u2019ll face up to 20 years in prison.<\/p>\n<\/div>\n