Post by : Raina
Al-Fahim
US prosecutors say three individuals employed in the cybersecurity sector are accused of turning their technical expertise into a criminal operation, allegedly breaching several American firms and demanding large ransoms.
Authorities identify Ryan Clifford Goldberg, formerly Sygnia Consulting Ltd.'s Director of Incident Response, and Kevin Tyler Martin, a former ransomware negotiator at DigitalMint, as central figures. Prosecutors say the activity began in May 2023 and involved at least five corporate victims.
Court documents state the pair, with a third associate, obtained nearly $1.3 million in cryptocurrency from a Florida medical device company. Officials say the attackers deployed ALPHV (BlackCat) ransomware to lock data and threatened exposure unless victims paid.
Prosecutors note the alleged perpetrators worked in businesses designed to defend clients and negotiate with attackers—roles that, authorities contend, provided them with the knowledge to orchestrate similar intrusions themselves.
DigitalMint has confirmed Martin's prior employment and told investigators the alleged conduct was unrelated to his duties. The firm said its systems and client records were not compromised and that those implicated no longer work there.
Sygnia likewise reported that Goldberg was dismissed immediately after the company learned of the allegations and that he is cooperating with law enforcement.
Federal officials say Goldberg is being held in federal custody in Florida. Martin, who has been released on bond, has pleaded not guilty. A third suspected associate, another former DigitalMint negotiator, has not yet been charged.
Investigators believe the group targeted multiple companies, including a pharmaceutical business in Maryland, a drone manufacturer in Virginia, an engineering firm and a physician's practice in California.
The FBI and the US Attorney's Office in Miami are conducting the probe, highlighting concerns about insider-assisted cybercrime within the cybersecurity industry.
English
