Sometimes, working in cybersecurity can take a dark turn. That’s what happened to three US-based professionals who chose to go rogue and end up on the wrong side of the law. Instead of defending companies from cyber threats, they got involved in planting malware and extorting money through ransomware. Their story shows how quickly a high-paying tech job can spiral into serious legal trouble.

The Dark Side of Ransomware Operations

Ransomware is malicious software used by cybercriminals to lock up a company’s data and demand payment for its release. Some hackers rent this software as a service, making it easier for anyone to get involved in cyber extortion. They find targets, deploy the malware, and share the profits. It’s a lucrative but risky business. The developers behind ransomware often keep a cut, while affiliates do the hacking.

In recent years, some cybersecurity workers have crossed the line. Instead of helping companies recover from attacks, they’ve started their own schemes. That’s what Kevin Martin did. He was a ransomware negotiator working for a company in Chicago. But in 2023, he decided to join the dark side. He teamed up with others and used ransomware to target businesses, including a Tampa medical firm and a Maryland pharma company. They demanded millions in ransom, but most companies paid far less than asked.

The Fall of Cybercriminal Collaborators

Martin worked with Ryan Goldberg, an incident manager at a cybersecurity firm. Together, they launched attacks and split the profits. Their biggest hit was a Florida medical center, where they encrypted data and demanded $10 million. The company paid about $1.27 million in crypto, which was split among the criminals. But the scheme didn’t last long.

As the FBI got closer, the criminals’ lives unraveled. Authorities searched Martin’s property in April 2025. Goldberg was also caught up in the investigation. He initially denied involvement but eventually admitted to helping with the attacks. His motivation? He said he was trying to pay off debts and didn’t want to go to prison for the rest of his life.

Goldberg and his wife decided to flee. They bought one-way tickets to Paris and left the US in late June. But the FBI tracked them down. Goldberg was arrested in Mexico City after flying from Amsterdam. Meanwhile, Martin stayed out of custody for a while, but Goldberg’s departure raised suspicion. A judge denied Goldberg bail, citing his attempt to evade law enforcement.

Goldberg now faces trial in the US. If convicted, he could spend up to 8 years in prison. His story made headlines, showing how a high-paying cybersecurity career can quickly turn into a life-changing mistake. Both men lost their jobs, and their companies distanced themselves from their actions. Goldberg used to earn over $214,000 a year, but his decisions led to the loss of his job and financial stability.

This story reminds us that the line between good and bad in cybersecurity is thin. Working in this field requires integrity—because crossing that line can have serious consequences. It also highlights how tempting it is to see cybercrime as an easy way to make money, but the risks are enormous. In the end, these professionals paid a heavy price for their choices, and their lives will never be the same.

Inspired by

• https://arstechnica.com/security/2025/11/fbi-arrests-ransomware-clean-up-experts-for-planting-ransomware/

Sources

• conde.digital
• cnevids.com
• digitalmint.io
• bloomberg.com
• cointelegraph.com