Australian Companies Will Soon Need to Report Ransom Payments

Australia is moving to require businesses with annual turnover above A$3 million to report ransomware payments under a new Cyber Security Act; the article outlines the proposal, comparisons to U.S. CIRCIA rules, and reactions from industry. It cites recent major incidents (Optus, Medibank), quantifies ransomware costs to the economy, and discusses intended benefits (better law enforcement visibility and incentives for stronger defenses) alongside concerns about compliance thresholds and penalties.