He Negotiated With Hackers. He Was One of Them.

Ransomware negotiator Angelo Martino secretly helped BlackCat extort his own clients. The hidden messages show how he sold them out. To his client, he offered the hackers one million dollars. Privately, he told them to keep rejecting the offers. This is the case of a professional trusted to help victims through a crisis while taking money from the criminals on the other side. The Aha Department follows the admitted messages, the private information that became leverage, and a separate conspiracy to attack additional victims. Martino pleaded guilty and was sentenced to 70 months in July 2026. His employer and clients had not known about or approved the disclosures. Would you pay to get your files back? More full investigations from The Aha Department:    • The Aha Department — Full Investigations   CHAPTERS 0:00 The offer and the hidden instruction 0:32 Why the negotiator had private access 1:16 The second conversation 1:51 Coaching the attackers 3:17 The ransom bills 4:37 Becoming an attacker 6:05 Following the money 6:43 The sentence SOURCES United States v. Martino, signed factual proffer (Document 26, 14 April 2026), especially pp.4–5: https://storage.courtlistener.com/rec... Judgment (Document 46, imposed 9 July 2026): https://storage.courtlistener.com/rec... Government sentencing memorandum (Document 40): https://storage.courtlistener.com/rec... Defence sentencing memorandum (Document 37): https://storage.courtlistener.com/rec... U.S. Department of Justice, Martino sentencing: https://www.justice.gov/opa/pr/florid... U.S. Department of Justice, co-conspirators and affiliate agreement: https://www.justice.gov/opa/pr/two-am... The five negotiated clients and the additional attack victims are separate groups. The $75.25m total is the five clients’ combined approximate ransom payments, not Martino's personal profit or a measurement of the extra loss he caused. The $1m offer does not establish an obtainable settlement. Court excerpts are reproduced documentary quotations; designed devices and stock people/locations are explanatory models, not recovered chats or photographs of Martino or his clients. Thumbnail: original conceptual illustration with fictional roles; not portraits of Martino or his clients, a recovered device image or a documented meeting. PHOTOGRAPHS & FOOTAGE Pexels License; photographs cropped, masked, composited and animated: https://www.pexels.com/license/ Mathias Reding — professional role: https://www.pexels.com/photo/elegant-... Nicola Barts — document/hand details: https://www.pexels.com/photo/unrecogn... Designer's Circle Interior Designer — empty boardroom: https://www.pexels.com/photo/an-empty... Claire Ló — laptop: https://www.pexels.com/photo/laptop-o... Castorly Stock — envelope: https://www.pexels.com/photo/woman-ho... MART PRODUCTION — dollar-value metaphor: https://www.pexels.com/photo/close-up... panumas nikhomkhai — server detail: https://www.pexels.com/photo/light-on... Srattha Nualsate — connector/routing metaphor: https://www.pexels.com/photo/close-up... ALL IZ Well — server footage: https://www.pexels.com/video/database... Phone: Rackham / Wikimedia Commons, CC0; screen content replaced with explanatory material: https://commons.wikimedia.org/wiki/Fi... SOUND & PRODUCTION Foley sources (trimmed/leveled; CC0 1.0): stevielematt/707823; tonymadethatt/817506; tix99/745014; sqeeeek/237106; Q.K./56244; SpaceJoe/484945; Kingofgamers_cz/352914, via Freesound.org. https://creativecommons.org/publicdom... Tabler Icons v3.35.0 — Paweł Kuna and contributors, MIT: https://github.com/tabler/tabler-icons Inter and EB Garamond: SIL Open Font License. Intro music (Marimba/Vibraphon, original tempo) and synchronized effects: commissioned with ElevenLabs. Original script, photographic collage and supplied ident: The Aha Department. Narration: Michael's authorised voice, synthesized with ElevenLabs v4. Foley is added sound design, not audio recovered from the case. #Cybercrime #Ransomware #TheAhaDepartment