Ransom Negotiators Become Part of the Attack Surface
A ransom negotiator who can see the victim's ceiling can make the extortion worse, because that access turns the response process into a leak source for the gang. In this case, prosecutors said Angelo Martino used his role to feed BlackCat victims' negotiating positions, insurance limits, and internal assessments, helping the group press five organizations for more money.
Martino was sentenced to 70 months in prison. The case was tied to a conspiracy that included two other cybersecurity workers, and prosecutors said one victim paid about $1.2 million in Bitcoin; federal investigators also seized more than $10 million in crypto and other assets linked to Martino.
For incident response teams that use outside negotiators or breach coaches, the negotiation channel is now a trust boundary, not a neutral buffer. If that channel is compromised, the damage is not just exposure of data but a better-priced extortion campaign.