Cybersecurity Experts Charged for Hacking US Businesses

In a shocking turn of events, three cybersecurity professionals have been accused of using their expertise to commit cybercrimes, allegedly hacking multiple US businesses to extort millions of dollars.

According to US prosecutors, Ryan Clifford Goldberg, former Director of Incident Response at Sygnia Consulting Ltd., and Kevin Tyler Martin, a ransomware negotiator at DigitalMint, worked together to infiltrate corporate networks and demand ransom payments. The scheme reportedly began in May 2023 and involved at least five businesses.

Court filings reveal that the duo, along with a third accomplice, successfully extracted nearly $1.3 million in cryptocurrency from a Florida-based medical device company. Prosecutors allege the men used ALPHV BlackCat ransomware to encrypt company data and threaten exposure unless paid.

Goldberg and Martin operated in a sector meant to defend victims against such attacks—companies specializing in negotiating with hackers to restore frozen systems. Ironically, they allegedly exploited their insider knowledge to conduct the same crimes they were hired to fight.

DigitalMint confirmed Martin’s former employment, emphasizing that the alleged crimes were “completely outside the scope” of his work. The company said none of its systems or client data were compromised and that all implicated individuals were dismissed months ago.

Similarly, Sygnia stated that Goldberg was immediately terminated upon learning of his involvement and is fully cooperating with investigators.

Goldberg remains in federal custody in Florida, while Martin, released on bond, has pleaded not guilty. The third suspect, another ransomware negotiator from DigitalMint, has not been charged.

Authorities believe the group targeted several firms, including a Maryland pharmaceutical company, a Virginia drone manufacturer, an engineering firm, and a doctor’s office in California.

The FBI and the US Attorney’s Office in Miami are leading the ongoing investigation, underscoring the growing threat of insider-led cybercrimes within the cybersecurity industry.