A ransomware negotiator, Ryan Eastwood Martino, faces federal charges for allegedly working with the Black Cat ransomware group to extort victims. Martino, who was hired to represent victims and negotiate ransom payments, is accused of using his position to illicitly share confidential client information with the attackers.

Court documents reveal Martino communicated with Black Cat actors via encrypted platforms and a special panel accessible only to affiliates. He allegedly provided details on victim insurance coverage and negotiation strategies, aiming to maximize ransom payouts. In return, Martino reportedly received a portion of the illicit funds in cryptocurrency. He even obtained affiliate access to the Black Cat panel and shared it with co-conspirators to launch further attacks.

Digital Mint, Martino's former employer, stated it was unaware of his alleged criminal activities and fired involved employees upon learning of the allegations. The company claims Martino circumvented internal safeguards to conceal his actions, making Digital Mint itself an "unknowing victim." The case raises serious concerns about trust and security within the cybersecurity incident response industry.