DOJ Sentences Two Americans For ALPHV BlackCat Ransomware Attacks

Two American cybersecurity professionals have been sentenced to four years in federal prison for their direct involvement in deploying the notorious ALPHV BlackCat ransomware.

Ryan Goldberg, 40, of Georgia, and Kevin Martin, 36, of Texas, utilized their highly specialized technical knowledge to extort businesses across the United States.

Between April and December 2023, the pair actively participated in a conspiracy to lock critical networks, steal sensitive data, and demand massive cryptocurrency payouts.

The sentencing highlights a troubling reality of industry insiders weaponizing their defensive skills for malicious financial gain against medical providers and engineering firms.

Inside The BlackCat Operation

Goldberg and Martin operated as affiliates within the ALPHV BlackCat Ransomware-as-a-Service (RaaS) ecosystem. This criminal business model relies on core developers to build the malware and maintain illicit internet infrastructure.

Meanwhile, affiliates like Goldberg and Martin are responsible for identifying high-value targets, deploying the payload, and managing the extortion process.

The two men agreed to hand over a 20% cut of all extorted funds to the BlackCat administrators in exchange for access to the sophisticated malware and its dedicated extortion platform.

In one notable attack, the group successfully extorted a single victim for approximately $1.2 million in Bitcoin. The attackers split their 80% share among themselves and used various methods to launder the digital currency.

What makes this case particularly severe is the perpetrators’ professional backgrounds. Both men worked in the cybersecurity industry and possessed advanced knowledge of network defense systems.

Instead of protecting infrastructure, they actively exploited it, going so far as to leak sensitive patient data from a doctor’s office when the victim hesitated to pay.

Global Law Enforcement Disruption

The sentencing marks the culmination of an extensive tracking and apprehension effort led by the FBI’s Cyber Division.

When law enforcement closed in on the operation, Goldberg attempted to evade justice by fleeing internationally.

The FBI tracked him across 10 countries before finally securing his capture, demonstrating the investigation’s massive global reach.

Following their capture, both Goldberg and Martin pleaded guilty in December 2025 to conspiracy to obstruct commerce by extortion. Martino pleaded guilty to the same charge in April 2026 and awaits his sentencing on July 9.

According to Justice research, this specific prosecution stems from a broader campaign against the ALPHV BlackCat syndicate, which targeted more than 1,000 victims worldwide.

In December 2023, the Justice Department successfully disrupted the group’s core operations. During that takedown, the FBI developed a specialized decryption tool that was distributed to hundreds of victims.

This technical intervention allowed affected organizations to restore their encrypted systems without paying the attackers, ultimately saving victims an estimated $99 million and crippling the group’s infrastructure.

Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google.

The post DOJ Sentences Two Americans For ALPHV BlackCat Ransomware Attacks appeared first on Cyber Security News.