A former ransomware negotiator at DigitalMint, Angelo Martino, was sentenced to 70 months in federal prison for abusing his insider position to facilitate extortion. Martino fed confidential client information to co-conspirators, enabling them to demand and collect a combined $75.3 million from five U.S.-based victims.
The sentence reflects the severity of the betrayal, as Martino was trusted by victims to negotiate lower ransom demands. Instead, he provided attackers with leverage—such as details on victims' financial capacity and insurance coverage—directly undermining the negotiation process.
Martino's scheme involved passing details from DigitalMint's internal systems to associates who then launched or escalated ransomware attacks. The information included victims' payment histories and maximum ransom thresholds, allowing co-conspirators to demand sums calibrated to maximize payout beyond initial requests.
No additional defendants have been named in court filings, though the investigation remains ongoing. The case underscores the vulnerability of the ransomware negotiation ecosystem, where intermediaries must be vetted to prevent insider threats.
Some in the cybersecurity field argue that the sentence is proportionate but note that the broader problem of ransomware enablers—including negotiators who may collude—remains under-scrutinized. This case may prompt tighter regulation of negotiation firms and their access to sensitive victim data.