[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFaRW4KE1xlZclTVQHClzMxjCiledxrJH5AZ6oynVaGA":3},{"article":4,"iocs":51,"watch_terms":57,"solutions":58,"lesson":61},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"e6949b53-dae2-4b5f-82bf-1c072610dd22","Cybersecurity Negotiator Gets 70 Months for Helping BlackCat Extort Victims","cybersecurity-negotiator-gets-70-months-for-helping-blackcat-extort-victims-6e6b95","Former ransomware negotiator Angelo Martino gets 70 months in prison for helping BlackCat extort US victims and misuse confidential client data in cyberattacks.","Angelo Martino, a former ransomware negotiator, has been sentenced to 70 months in federal prison for his role in assisting the BlackCat (ALPHV) ransomware group. He used his access to confidential client information to aid the attackers in pressuring victims for higher ransom payments. Martino, along with former cybersecurity professionals Kevin Martin and Ryan Goldberg, operated as BlackCat affiliates, deploying ransomware and laundering proceeds, including a $1.2 million Bitcoin payment from one victim.","Ransomware negotiator sentenced to 70 months for aiding BlackCat attacks and extorting US victims.","https:\u002F\u002Fhackread.com\u002Fcybersecurity-negotiator-blackcat-extort-victims\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fcybersecurity-negotiator-blackcat-extort-victims.jpg","2026-07-10T13:18:03+00:00","2026-07-10T14:00:32.837767+00:00",9,[17,20,22,24,26],{"name":18,"type":19},"BlackCat","threat_actor",{"name":21,"type":19},"ALPHV",{"name":23,"type":19},"Angelo Martino",{"name":25,"type":19},"Kevin Martin",{"name":27,"type":19},"Ryan Goldberg","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":28,"icon":30,"name":31,"slug":32},null,"Ransomware","ransomware",[34,39,44,46],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":45},{"id":28,"icon":30,"name":31,"slug":32},{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[52,55],{"type":53,"value":21,"context":54},"malware","Alias for the BlackCat ransomware group",{"type":53,"value":18,"context":56},"Ransomware used in the attacks",[],{"controls":59,"vendors":60},[],[],{"slug":62,"title":63,"body":64,"framework_refs":65,"framework_notes":79},"insider-threat-ransomware-negotiator-weaponized-client-data-for-blackcat","Insider Threat: Ransomware Negotiator Weaponized Client Data for BlackCat","Angelo Martino exploited privileged access to confidential client information gained through his role as a cybersecurity negotiator to actively assist the BlackCat ransomware group in pressuring victims. This case represents a severe insider threat scenario where trust placed in a security professional was weaponized against the very organizations seeking protection. It highlights the critical danger of granting third-party vendors and consultants unrestricted access to sensitive data without oversight or controls. The incident underscores that supply chain risk extends to human actors — not just software — and that even those hired to defend organizations can become adversaries.",[66,67,68,69,70,71,72,73,74,75,76,77,78],"CIS Control 5: Account Management","CIS Control 6: Access Control Management","CIS Control 14: Security Awareness and Skills Training","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 PS-7: External Personnel Security","NIST SP 800-53 AU-12: Audit Record Generation","NIST SP 800-161: Supply Chain Risk Management","ISO\u002FIEC 27001 A.7.1: Pre-employment Screening","ISO\u002FIEC 27001 A.15: Supplier Relationships","GDPR Article 28: Processor Obligations","GDPR Article 32: Security of Processing","NIST CSF ID.SC-3: Third-party Risk Management",{}]