DigitalMint’s former negotiator Angelo Martino received a 70‑month sentence after funneling confidential data to attackers, inflating ransom demands. The case spotlights trust gaps in cyber‑security services.
Key Takeaways
- Angelo Martino sentenced to 70 months in prison.
- He supplied confidential negotiation details to BlackCat scammers.
- Victims collectively paid over $75 million in inflated ransoms.
Florida resident Angelo Martino was convicted for colluding with ransomware criminals while serving as a negotiator for DigitalMint, a cybersecurity firm. According to a sentencing memorandum from the U.S. Department of Justice, Martino’s official role was to “negotiate with cybercriminals to mitigate the ransoms paid by DigitalMint’s clients.” Instead, he provided attackers with confidential negotiation intelligence, enabling them to dramatically increase ransom demands.
Case Background and Scope
DigitalMint contracts specialists to act as intermediaries between victims and ransomware gangs, aiming to reduce financial loss and expedite data recovery. In 2024, federal investigators uncovered that Martino secretly supplied the notorious BlackCat ransomware group with internal negotiation tactics, timelines, and payment preferences. This breach of trust allowed the gang to inflate ransom figures, resulting in five identified victims paying more than $75 million in total, a sum that would have been substantially lower without the leaked data.
Legal Proceedings and Sentencing
Martino, now 41, pleaded guilty and initially requested a 24‑month term, citing “substantial assistance” that helped convict two co‑defendants. Nonetheless, the court imposed a 70‑month prison sentence, underscoring the gravity of abusing a position of confidence. His co‑defendants—Texas‑based Kevin Martin, another DigitalMint negotiator, and Georgia‑based Ryan Goldberg, an incident manager at security firm Sygnia—received separate convictions, reflecting a broader network of collusion.
Implications for Cyber‑Security Industry
The verdict sends a stark warning to the cybersecurity sector: negotiators and third‑party mediators must be subject to rigorous vetting and continuous oversight. As ransomware attacks proliferate, the demand for professional negotiation services grows, but so does the risk of insider betrayal. Regulators are now under pressure to establish clearer standards for transparency, conflict‑of‑interest disclosures, and accountability in cyber‑extortion mitigation services.
