Counterintelligence & Tradecraft — 2026-04-22

Ex-DigitalMint negotiator Angelo Martino pleads guilty to extorting clients for ALPHV/BlackCat ransomware affiliates; $10M seized

Angelo Martino, a former negotiator at Chicago-based ransomware-response firm DigitalMint, pleaded guilty Monday to federal extortion charges, admitting he played both sides in five ransomware cases by feeding confidential victim information, including cyber insurance limits and negotiation strategy, to operators of the ALPHV/BlackCat ransomware-as-a-service group to maximize payouts in exchange for a cut, DOJ said. Authorities have seized at least $10 million in Martino's assets. He faces up to 20 years and is scheduled for sentencing July 9. Martino is the third ransomware negotiator charged in a year to face prison for similar schemes; former DigitalMint colleague Kevin Martin and ex-Sygnia incident responder Ryan Goldberg were previously charged.

Analysis
The three-prosecution cluster in twelve months, corroborated across DOJ press, CyberScoop, TechCrunch, and Hacker News, with the plea agreement as public record, points to a structural counterintelligence problem in commercial ransom-response: negotiators hold privileged access to victim networks, insurance limits, and incident timelines, and those artifacts are likely more valuable to affiliates than the ransom itself. The Martino-Martin-Goldberg sequence suggests the model is scaling rather than a single-firm anomaly. DOJ is likely to pursue industry-wide licensing or regulatory proposals within the next 12-18 months, particularly if Kaiser's terror-designation proposal gains traction. FBI-led notification to DIB and federal-contractor victims that engaged DigitalMint or Sygnia in 2023-2024 is very likely within the next 30 days to support follow-on incident-response cleanup. The seizure signals accelerating asset-recovery tradecraft against crypto-denominated proceeds. The pattern may instead be concentrated in the same DigitalMint-Sygnia firm sample rather than indicative of broader industry rot, in which case prosecutorial action alone will not produce the licensing regime DOJ likely pursues.

3 sources

Former DigitalMint ransomware negotiator pleads guilty to extortion scheme - CyberScoop
Ransomware negotiator pleads guilty to helping ransomware gang - TechCrunch
Ransomware Negotiator Pleads Guilty to Aiding BlackCat Attacks in 2023 - The Hacker News