Australian ransomware victims now must tell the government if they pay up

Australia has enacted a first-of-its-kind law requiring organizations with annual turnover above AUS $3 million and designated critical infrastructure entities to report any ransomware extortion payments to the Australian Signals Directorate within 72 hours, a threshold expected to capture about 6.5% of businesses representing roughly half of the economy.