BlackCat campaign expands across multiple victims
Campaign
Summary
Hide ▲
Show ▼
The BlackCat ransomware operation ran a multi-victim extortion campaign against US organizations between April and November 2023, creating sustained ransom pressure across multiple sectors. Angelo Martino later admitted he helped the group by sharing victim negotiation details, including insurance limits and internal positions, to improve payout leverage. He also conspired with Ryan Goldberg and Kevin Martin to deploy ransomware, effectively acting as a BlackCat affiliate. Victims included hospitality, financial services, non-profit, retail, manufacturing, medical, engineering, and pharmaceutical organizations.
Related Happenings
Angelo Martino BlackCat ransomware sentencing
Law Enforcement
H score36
First: 10.07.2026 11:17
Last: 10.07.2026 11:17
Sources 1
How related:
A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks.
About this happening:
Angelo Martino was sentenced to 70 months in prison for helping target U.S. companies in BlackCat (ALPHV) ransomware attacks. The sentence increases criminal expos...
Angelo Martino BlackCat ransomware sentencing
Law EnforcementHow related: A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks.
About this happening: Angelo Martino was sentenced to 70 months in prison for helping target U.S. companies in BlackCat (ALPHV) ransomware attacks. The sentence increases criminal expos...
Conti campaign expands across multiple victims
Campaign
H score38
First: 12.06.2026 20:54
Last: 12.06.2026 20:54
Sources 1
About this happening:
The Conti ransomware operation ran as a large-scale 2021-2022 extortion campaign that stole data and encrypted devices to pressure victims into paying Bitcoin....
Conti campaign expands across multiple victims
CampaignAbout this happening: The Conti ransomware operation ran as a large-scale 2021-2022 extortion campaign that stole data and encrypted devices to pressure victims into paying Bitcoin....
U.S. sentencing of Deniss Zolotarjovs in Karakurt ransomware case
Law Enforcement
H score39
First: 05.05.2026 13:13
Last: 05.05.2026 13:13
Sources 1
About this happening:
Deniss Zolotarjovs was sentenced to 8.5 years in prison in the United States for serving as a Karakurt ransomware negotiator, resolving a cross-border cybercrime c...
U.S. sentencing of Deniss Zolotarjovs in Karakurt ransomware case
Law EnforcementAbout this happening: Deniss Zolotarjovs was sentenced to 8.5 years in prison in the United States for serving as a Karakurt ransomware negotiator, resolving a cross-border cybercrime c...
U.S. sentencing of Ryan Clifford Goldberg and Kevin Tyler Martin in BlackCat ransomware case
Law Enforcement
H score45
First: 01.05.2026 10:47
Last: 01.05.2026 10:47
Sources 1
How related:
Two former employees of cybersecurity incident response companies Sygnia and DigitalMint were sentenced to four years in prison each for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks.
About this happening:
Ryan Clifford Goldberg and Kevin Tyler Martin, former employees of Sygnia and DigitalMint, were sentenced in a BlackCat (ALPHV) ransomware law-enforcement case...
U.S. sentencing of Ryan Clifford Goldberg and Kevin Tyler Martin in BlackCat ransomware case
Law EnforcementHow related: Two former employees of cybersecurity incident response companies Sygnia and DigitalMint were sentenced to four years in prison each for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks.
About this happening: Ryan Clifford Goldberg and Kevin Tyler Martin, former employees of Sygnia and DigitalMint, were sentenced in a BlackCat (ALPHV) ransomware law-enforcement case...
Tampa medical device company hit by ransomware attack linked to BlackCat (ALPHV)
Incident
H score45
First: 01.05.2026 10:47
Last: 01.05.2026 10:47
Sources 1
How related:
Prosecutors said the Tampa medical device company paid $1.27 million after its servers were encrypted and it received a $10 million ransom demand in May 2023, with the payment laundered and split three ways with Martino.
About this happening:
A Tampa medical device company suffered a ransomware intrusion in May 2023 that encrypted its servers and triggered a $10 million ransom demand. The company later...
Tampa medical device company hit by ransomware attack linked to BlackCat (ALPHV)
IncidentHow related: Prosecutors said the Tampa medical device company paid $1.27 million after its servers were encrypted and it received a $10 million ransom demand in May 2023, with the payment laundered and split three ways with Martino.
About this happening: A Tampa medical device company suffered a ransomware intrusion in May 2023 that encrypted its servers and triggered a $10 million ransom demand. The company later...
Timeline
-
01.05.2026 14:30 2 articles · 2mo ago
U.S. workers sentenced for BlackCat ransomware roles
Legal Policy Action UpdateRyan Goldberg and Kevin Martin were each sentenced to four years in prison for helping the BlackCat/ALPHV ransomware gang conduct attacks against multiple U.S. organizations during 2023. Prosecutors said the pair worked alongside Angelo Martino, paid BlackCat administrators a 20% share of ransom payments, and in one case received a Bitcoin ransom worth $1.2m while also leaking patient data from a healthcare victim.
Show sources
- Two American Cybersecurity Workers Jailed for BlackCat Ransomware Attacks — www.infosecurity-magazine.com — 01.05.2026 14:30
- Former ransomware negotiator gets 4 years for BlackCat attacks — www.bleepingcomputer.com — 10.07.2026 11:17
-
22.04.2026 14:00 1 articles · 2mo ago
BlackCat campaign expands across multiple victims
Initial DisclosureIn April 2023, Angelo Martino began colluding with BlackCat while working as a ransomware negotiator. He then shared victim negotiation information that could help the group maximize extortion demands.
Show sources
- Former Ransomware Negotiator Pleads Guilty to Working For BlackCat Cyber Gang — www.infosecurity-magazine.com — 22.04.2026 14:00