US, UK, Australia sanction Russian national after major Australian ransomware attack

Governments of the U.S., U.K., and Australia sanctioned Russian national Alexander Ermakov for his role in the October 2022 REvil/Sodinokibi ransomware attack on Medibank, which compromised health insurance data for nearly 4 million Australians (about 9.7 million records). The notice links Ermakov to the notorious REvil group (also tied to the July 2021 Kaseya incident), notes ongoing investigations and arrest efforts, and recalls prior U.S. reward and legal actions targeting REvil operators.