Australia Begins New Ransomware Payment Disclosure Rules

Australia has introduced mandatory ransomware payment reporting rules for businesses with annual turnover of AUS$3 million, requiring reports to the Australian Signals Directorate within 72 hours of making a ransom payment. Reports must include incident impact, ransomware/malware variants, exploited vulnerabilities, ransom demanded and paid, payment methods, and details of negotiations; non-compliance can lead to civil penalties, while public sector organizations are exempt.