Australian Victims Now Required to Report Ransomware Payments to the Government

Australia has introduced a law requiring organizations with AUD $3M+ annual revenue and critical infrastructure entities to report ransomware ransom payments to the Australian Signals Directorate within 72 hours; the article outlines the scope, enforcement timeline, and rationale. The author criticizes the policy as punitive and insufficiently proactive—arguing governments should provide prevention, intelligence sharing, and operational support rather than only post-incident reporting—and the piece includes promotional material from a ransomware protection vendor.