US Cybersecurity Experts Admit to Ransomware Attacks on US Firms
Two cybersecurity professionals have pleaded guilty to using ransomware to attack multiple US companies. The charges focus on conspiracy to interfere with commerce through extortion. Their sentencing is scheduled for March 12, 2026. The US Department of Justice announced these developments this week.
Details of the Ransomware Operations
Ryan Goldberg and Kevin Martin targeted several businesses with the BlackCat ransomware, also known as ALPHV, between April and December 2023. They used a ransomware-as-a-service platform, meaning they didn’t create the malware but identified victims and paid the developers a share of the ransom payments.
Their victims included a medical device company in Florida, a pharmaceutical firm in Maryland, a doctor’s office and an engineering company in California, and a drone manufacturer in Virginia. An unnamed co-conspirator was also involved, according to court records.
BlackCat is known for its sophisticated ability to exploit cloud backups, which makes it especially dangerous. It is considered one of the most active and lethal ransomware groups today. The group’s attacks have impacted more than 1,000 victims worldwide.
Legal Proceedings and Financial Impact
Goldberg and Martin reached plea agreements with the US Attorney’s Office in Florida on December 18, 2025. The court accepted these agreements on December 29. They admitted to causing over $9.5 million in damages, though authorities were only able to trace about $324,000 in ransom proceeds to them.
The two face a maximum prison sentence of 20 years. The investigation into the BlackCat group has been ongoing for years. The FBI played a key role in dismantling the operation.
In December 2023, the FBI developed a tool capable of decrypting data targeted by BlackCat ransomware. This breakthrough helped rescue hundreds of victims from paying ransom, saving an estimated $99 million. Authorities believe this was a major blow to the ransomware group’s ability to operate.
Overall, this case highlights the ongoing fight against cybercrime and the risks posed by ransomware gangs. Law enforcement continues to target these groups to protect businesses and individuals from future attacks.















What do you think?
It is nice to know your opinion. Leave a comment.