Ex-Cybersecurity Experts Indicted for ALPHV Ransomware Attacks
Ransomware Allegations Against Former Cybersecurity Professionals
The cybersecurity world recently witnessed an unexpected twist with the indictment of two former employees of a cybersecurity firm accused of orchestrating major ransomware attacks. On November 3, 2025, Kevin Tyler Martin and Ryan Clifford Goldberg faced charges in connection with multimillion-dollar extortions across U.S. businesses, using ransomware as their tool of choice.
This case, filed in the Southern District of Florida, underscores the alarming trend of insiders turning rogue. Martin and Goldberg reportedly targeted firms including a Florida medical device company, a Maryland pharmaceutical firm, and a Virginia drone manufacturer. One Florida-based company alone faced a $10 million demand, ultimately paying $1.27 million to regain access to their data.
As the FBI and cybersecurity entities scramble to mitigate the risks from such insiders, Allan Liska from Recorded Future emphasized the eroding trust in cybersecurity professionals responsible for safeguarding critical data.
The media buzz—initially sparked by the Chicago Sun-Times—zeroes in on the trust breach and the evolving risks posed by ransomware in the cybercrime domain.
Inside the Indictment: ALPHV’s Role and Company Responses
The duo’s use of ALPHV ransomware—a notorious strain in the cybercrime world—has been a focal point in the indictment. Both Martin and Goldberg, having worked with companies like DigitalMint and Sygnia, breached trust by dividing ransomware profits and sharing malicious code.
DigitalMint underscores Martin’s independent actions and their non-involvement, reiterating cooperation with the ongoing investigation. Similarly, Sygnia swiftly terminated Goldberg and stressed their assistance to federal investigators, maintaining distance from culpability.
Overall, these charges highlight the intricate and occasionally strained relationship between cybersecurity firms and law enforcement. The reliance on private sector expertise, juxtaposed with potential insider threats, remains a complex puzzle in the fight against ransomware’s damaging impact on economic health and critical infrastructure.
**Interested in more tech insights and staying secure online? Visit Qsentinel for expert advice and the latest cybersecurity updates.**
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more
