The Betrayal: Feds Charge DigitalMint Employees with Running ALPHV/BlackCat Ransomware Attacks
Former employees of the U.S.-based company DigitalMint, which specialized in negotiating with hackers on behalf of ransomware victims, have themselves been implicated in conducting cyberattacks. The U.S. Department of Justice has charged them with orchestrating a series of intrusions involving the ALPHV/BlackCat ransomware group.
According to the indictment filed in September, the scheme involved two DigitalMint employees — Kevin Tyler Martin and an unnamed colleague — along with Ryan Clifford Goldberg, a former incident-response manager at Sygnia. Prosecutors allege that the trio infiltrated corporate networks, exfiltrated confidential data, and deployed ransomware developed by members of ALPHV/BlackCat. This cybercriminal collective operates under a “ransomware-as-a-service” model, providing its tools to affiliate hackers who conduct attacks and share a portion of the ransom with the malware’s developers.
Investigators claim that Martin and his accomplices received over $1.2 million in cryptocurrency from one victim — a Florida-based medical equipment manufacturer. They also allegedly attempted to target at least five additional organizations, including a drone manufacturer in Virginia and a pharmaceutical firm headquartered in Maryland.
The charges were publicly announced on November 2. A Sygnia spokesperson confirmed that Goldberg had indeed been employed by the company but was dismissed immediately after management learned of his suspected involvement in the attacks. DigitalMint stated that Martin was still on staff at the time of the crimes but acted entirely outside the scope of his professional duties. The company also confirmed that the second suspect was likely a former employee. According to a company representative, DigitalMint is cooperating fully with authorities and assisting the ongoing investigation.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.