“As part of his duties, the defendant was provided with details about the attack and information about the ransom demand and typically the victim’s applicable insurance coverage and negotiation strategy,” the factual offer said.
Martino used BlackCat’s live chat system to negotiate ransom payments. Beginning in April 2023, he “began communicating with BlackCat actors via the Tox messaging platform and in a separate ‘broker chat’ tab of the BlackCat dashboard,” which was “only accessible to the defendant and BlackCat dealmakers and affiliates,” the factual offer said.
Martino used the intermediary chat tab to provide confidential information about clients.
“The purpose of these intermediary chat communications was to maximize the ransom payments paid by those victims to the BlackCat actors,” the court document said. “This information provided by the defendant without the victims’ knowledge included the victims’ insurance policy limits and internal negotiating positions. In exchange for providing confidential information, the defendant received a portion of the ransomware payments in digital currency.”
In May 2023, Martino gained affiliate access to the BlackCat panel and shared that access with co-conspirators. “After the defendant obtained affiliate access, the defendant, Co-conspirator 1, and Co-Conspirator 2 accepted and used the ransomware and the BlackCat platform to attack and extort victims and share the ransom proceeds among themselves and with the BlackCat administrator,” the factual offer said.
DigitalMint “also an unconscious victim”
In a statement provided to Ars today, DigitalMint said it had no knowledge of Martino’s criminal actions while he worked there. DigitalMint said it fired employees involved in the conspiracy after learning of the Justice Department’s allegations, “and fully cooperated with federal authorities throughout the investigation.”
“The actions of Martino and his accomplices were deliberately hidden from DigitalMint and clearly violated the company’s values, ethical standards and law,” DigitalMint said. “The government has now made it publicly clear that DigitalMint was also an unwitting victim of these crimes.”
DigitalMint said Martino evaded the company’s internal safeguards intended to prevent fraud.
“DigitalMint maintained controls consistent with industry standards, including background checks and compliance procedures, but Martino intentionally concealed his conduct from the company, including through separate, unauthorized communication channels that government documents describe as accessible only to Martino and BlackCat dealmakers and affiliates,” DigitalMint said. “When federal authorities brought the allegations to the company’s attention, DigitalMint acted immediately.”
signia he told CNN and other media outlets in November who fired Goldberg “immediately upon learning of the situation.” Sygnia said the company itself was not a target of the investigation and was working closely with the FBI.
