Florida Ransomware Negotiator Sentenced for Extortion Scheme

Washington DC, United States Jul 10, 2026 ALN: Florida man Angelo Martino has been sentenced to more than five years in prison for conspiring with hackers to deploy ransomware during his job as a ransomware negotiator for a U.S. cybersecurity company.

The U.S. Department of Justice confirmed the sentence on Thursday, noting that the government seized more than $10 million worth of cryptocurrency and assets. Martino allegedly bought these assets, which include a food truck and a luxury fishing boat, with money stolen in the hacks.

Martino is the third person to be jailed for the scheme, following the earlier incarceration of cybersecurity professionals Kevin Martin and Ryan Goldberg. The trio, prosecutors say, worked together to deploy the BlackCat ransomware against companies in the United States throughout 2023. In one successful attack, the cyber professionals moonlighting as criminals extorted a company for about $1.2 million, which they then split three ways after laundering the funds.

The investigation highlights a rare case of security professionals working for malicious hackers while on the job. Governments have long advised victims of hacking and extortion not to pay any ransom and prevent cybercriminals from profiting, although some companies do so anyway in attempts to prevent their customers’ private data from being leaked.

Extortion attacks have helped create an entire insurance sub-sector in the U.S. for responding to ransomware and extortion attacks. Some companies in this space employ negotiators to try to bring down the cost of ransoms.

BlackCat (also known as ALPHV) is a ransomware-as-a-service operation that allows independent hackers, known as affiliates, to rent access to the gang’s file-encrypting malware in exchange for a cut of the profits from cyberattacks. 

The group’s ransomware was famously used to steal highly sensitive medical and billing data of more than 192 million people in America during a hack at U.S. health technology giant Change Healthcare in February 2024, though the affiliate hackers responsible for the 2024 data breach were never identified.

The sentencing of Angelo Martino serves as a stark reminder of the growing threat posed by ransomware attacks and the complex motivations that can drive individuals within the cybersecurity industry to engage in illicit activities. The case underscores the potential for conflict of interest when cybersecurity professionals, who are often entrusted with protecting sensitive data, become embroiled in criminal enterprises.

Ransomware attacks have surged in recent years, with various sectors being targeted, including healthcare, education, and critical infrastructure. The rise of ransomware-as-a-service models has made it easier for less technically skilled individuals to engage in cybercrime, as they can rent sophisticated tools and infrastructure from more experienced hackers. This trend has led to a proliferation of ransomware groups, making it increasingly difficult for law enforcement to combat the issue effectively.

In response to the growing threat, many organizations have turned to cybersecurity insurance as a means of mitigating the financial impact of potential attacks. Cyber insurance policies often cover ransom payments, recovery costs, and legal liabilities. This has, however, led to a controversial debate about whether paying ransoms encourages further criminal activity. Some experts argue that paying ransoms only fuels the cycle of attacks, while others contend that organizations must prioritize business continuity and data protection.

The involvement of cybersecurity professionals in criminal schemes raises ethical questions about the responsibilities of those in the industry. As trusted figures, they are expected to uphold the highest standards of integrity. However, cases like Martino's demonstrate that the allure of financial gain can lead some individuals to compromise their professional ethics. This situation may prompt organizations to implement stricter hiring practices and conduct more thorough background checks to prevent similar occurrences in the future.

The implications of this case extend beyond the individuals directly involved. It highlights the need for a comprehensive approach to cybersecurity that includes not only technological solutions but also a robust legal framework to deter and punish cybercriminals. Law enforcement agencies are increasingly collaborating with international partners to track and apprehend cybercriminals, given that many ransomware groups operate across borders.

As the digital landscape continues to evolve, so too must the strategies employed by organizations to protect themselves against ransomware attacks. This includes investing in employee training, improving incident response plans, and adopting a proactive approach to cybersecurity. The Martino case serves as a cautionary tale for those in the cybersecurity field, emphasizing the importance of ethical conduct and the potential consequences of straying from that path.

In conclusion, the sentencing of Angelo Martino for his role in a ransomware extortion scheme not only serves as a significant legal outcome but also raises critical questions about the integrity of cybersecurity professionals. As ransomware attacks become more sophisticated and pervasive, the industry must remain vigilant in its efforts to combat this growing threat while ensuring that those entrusted with safeguarding sensitive information do not exploit their positions for personal gain.

The case also emphasizes the need for ongoing education and awareness within the cybersecurity community. As technology advances, so too do the tactics employed by cybercriminals. Cybersecurity professionals must stay informed about emerging threats and develop skills to counteract them effectively. This includes understanding the ethical implications of their work and recognizing the potential for conflicts of interest.

Furthermore, organizations must foster a culture of transparency and accountability, where employees feel empowered to report unethical behavior without fear of retaliation. This can help create an environment where integrity is prioritized, and individuals are less likely to engage in illicit activities.

The financial ramifications of ransomware attacks are significant, not just for the targeted organizations but also for the broader economy. Businesses face not only the immediate costs associated with ransom payments but also potential long-term damage to their reputations, loss of customer trust, and legal liabilities. The growing trend of ransomware attacks necessitates a shift in how organizations approach cybersecurity, moving from reactive measures to proactive strategies that prioritize prevention and resilience.

In light of the Martino case, stakeholders across various sectors must collaborate to develop best practices and share information about threats and vulnerabilities. This collective approach can enhance the overall security posture of organizations and contribute to a more robust defense against ransomware attacks.

Ultimately, the sentencing of Angelo Martino serves as a critical reminder of the ethical responsibilities inherent in the cybersecurity profession. As the industry grapples with the complexities of protecting sensitive data in an increasingly hostile digital landscape, it must also confront the moral dilemmas that arise when individuals prioritize personal gain over the collective good. By reinforcing ethical standards and fostering a culture of integrity, the cybersecurity community can work towards a future where such breaches of trust become increasingly rare.