Two men convicted of committing ransomware attacks while working for cybersecurity firms each have been sentenced to four years in prison.
Ryan Goldberg, 40, of Georgia, and Kevin Martin, 36, of Texas, were sentenced April 30 after each pleading guilty to one count of conspiracy to obstruct, delay or affect commerce or the movement of any article or commodity in commerce by extortion.
“The court’s sentences … reflect the damage that these defendants inflicted during their cyberattacks on victim companies throughout the United States,” Assistant Attorney General A. Tysen Duva said in a news release. “They harmed important firms who were providing medical and engineering services. They played hardball with them, going so far as to cause the leak of patient data from a doctor’s office victim.”
The Justice Department alleged that Mr. Goldberg, Mr. Martin and a third coconspirator targeted organizations including a California physician’s office and a Maryland-based pharmaceutical company, and extorted $1.27 million in virtual currency from a medical device firm headquartered in Florida. Prosecutors said they worked with the ALPHV BlackCat ransomware group from 2023 to 2025, trading a 20% share of any ransom received in exchange for use of the malware and extortion platform.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.