Two U.S. cybersecurity professionals — Ryan Clifford Goldberg (40, Georgia) and Kevin Tyler Martin (36, Texas) — both with backgrounds in incident response and ransomware negotiation, admitted guilt in federal court. A third unnamed co-conspirator was also involved.
What were the charges?
They pleaded guilty to conspiracy to obstruct, delay or affect commerce by extortion for their roles in deploying ransomware attacks on multiple victims in 2023.
The attacks involved ALPHV/BlackCat ransomware, one of the most notorious ransomware families operating on a ransomware-as-a-service model — where affiliates get access to the malware in exchange for a share of ransom proceeds.
Details of the Scheme
- While employed at cybersecurity firms, the defendants used their insider knowledge and access to encrypt victims’ computer systems and extort payments — a stark betrayal of their expected role to defend against such attacks.
- They targeted multiple U.S. companies, including a medical device manufacturer, demanding ransoms and allegedly earning around $1.2 million in Bitcoin from at least one victim.
- Prosecutors noted that the defendants agreed to pay ransomware developers a portion of any ransom received, illustrating how BlackCat’s affiliate model works.
- These attacks occurred between April and December 2023.
Legal Consequences
- The guilty pleas were accepted in the U.S. District Court for the Southern District of Florida.
- Sentencing is scheduled for March 12, 2026, where each defendant faces up to 20 years in prison under federal extortion statutes.
- As part of plea arrangements, they may also face forfeiture and financial penalties tied to illicit proceeds.
Broader Implications
This case has drawn widespread attention because it involves insider abuse — people trusted to protect organizations instead exploiting that trust for criminal gain. Law enforcement officials emphasized that expertise in cybersecurity does not exempt individuals from accountability and pointed to the need for stronger internal monitoring and ethical standards within the industry
