Court gives former ransomware negotiator 70 months for BlackCat conspiracy

DOJ’s Civil Cyber-Fraud Initiative release says Angelo Martino was a former ransomware negotiator who crossed the line from handling extortion to participating in it. The court sentenced him to 70 months for conspiring with BlackCat/ALPHV actors to extort multiple victims and with other former cybersecurity professionals to attack additional victims in 2023. That is a different fact pattern from the familiar debate over ransom payments, incident response vendors and whether payment facilitation sustains the market. DOJ is alleging active participation in the conspiracy.

For contractors and managed service providers, the operational lesson is blunt: the person with access to victim communications, ransom dynamics and internal response details can become the threat actor’s best asset. That risk does not wait for a board-level cyber strategy review. It sits in hiring, access control, monitoring, conflict checks and the supervision of anyone handling negotiations or privileged incident data.

The open questions matter. The release does not identify which firms employed Martino as a negotiator, whether other negotiators from those firms are under investigation, or the full scope of co-conspirators in the charging documents. Until DOJ fills in that map, the compliance takeaway is narrower but real. Insider participation in a ransomware supply chain can create criminal exposure even where the employer’s public story is that it was helping victims manage a crisis.