.jpeg)
The U.S. Justice Department has launched an investigation into a former employee of DigitalMint, a company specializing in ransomware negotiation and cryptocurrency payments. The individual is suspected of secretly profiting from ransomware payments by striking deals with hackers. DigitalMint has confirmed the probe, stating the employee was terminated immediately upon discovery of the alleged misconduct and that the company is fully cooperating with law enforcement.
Key Takeaways
-
A former DigitalMint employee is under U.S. Justice Department investigation for allegedly profiting from ransomware payments.
-
DigitalMint, a company that negotiates with hackers and facilitates crypto payments, terminated the employee and is cooperating with authorities.
-
The company maintains it is not a target of the investigation.
-
The probe raises questions about the ethics and transparency within the ransomware negotiation industry.
Ex-Negotiator Under Scrutiny
U.S. law enforcement officials are investigating a former DigitalMint employee for allegedly colluding with hackers to personally benefit from ransomware extortion payments. DigitalMint, a Chicago-based firm that assists organizations in negotiating with cybercriminals and facilitating cryptocurrency payments, confirmed the ongoing criminal investigation.
DigitalMint's Response And Stance
DigitalMint President Marc Jason Grens stated that the former employee was "immediately terminated" once the allegations surfaced. Grens emphasized that DigitalMint itself is not a target of the investigation and is "cooperating fully with law enforcement." The company also asserted that it "acted swiftly to protect our clients" and began communicating facts to affected stakeholders as soon as possible.
The Shady Side of Ransomware Negotiation
The investigation highlights concerns within the ransomware negotiation industry. Critics, such as James Taliento, CEO of cyber intelligence firm AFTRDRK, suggest that negotiators may not always prioritize their clients' best interests, especially if their compensation is tied to the size of the ransom paid. This sentiment echoes past reports, including a 2019 ProPublica investigation, which uncovered instances of firms allegedly overcharging clients by claiming specialized recovery methods after paying hackers.
Declining Ransomware Payments
Despite the ongoing investigation, recent data indicates a decline in ransomware payments. A February report from cyber incident response firm Coveware revealed that only 25% of companies hit with extortion demands in the last quarter of 2024 paid the ransom, a significant drop from 85% in the first quarter of 2019. This trend suggests improved cybersecurity defenses, better backup strategies, and increased law enforcement efforts are deterring payments. Similarly, blockchain analytics provider Chainalysis reported a 35% decrease in ransomware payments in 2024, totaling $815 million compared to $1.25 billion in 2023.
Sources
-
US Probes Whether Negotiator Took Slice of Hacker Payments, Bloomberg.
-
US Investigating Ransomware Negotiation Firm Employee, Cointelegraph.
-
US Probes Ex-Employee at Crypto Firm DigitalMint in Ransomware Case, The Crypto Times.
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.