Ransomware payment and cyber extortion payment reporting

Ransomware payment and cyber extortion payment reporting

Under section 27 of the Cyber Security Act 2024, a reporting business entity has an obligation to use this form to report to the Government if you have made or are aware another entity has made on your behalf, a ransomware or cyber extortion payment within 72 hours.

For more assistance on how to use this form, see How to make a report: Ransomware payment reporting | HomeAffairs.gov.au.

Which best describes your organisation?

Your organisation details

Critical Infrastructure Sector
Critical Infrastructure Asset

Entity you are reporting on behalf of

Cyber security incident details

You are only required to disclose information you know, or by reasonable search or enquiry, are able to find out.
Has this cyber security incident impacted your infrastructure?
Has this cyber security incident impacted your customers?

Demand information

Type of payment demanded

Payment information

Type of payment provided

Extorting entity information

Have you communicated with the extorting entity regarding the cyber security incident, the demand or payment?

Additional information

Please provide any further information that may assist the Commonwealth in the response to, mitigation or resolution of the cyber security incident.
Was this helpful?
Yes this was helpful
No this was not helpful

Thanks for your feedback!

We welcome additional feedback below.

How easy was it to find information?
How easy was it to understand this information?
After reading this, how confident are you that you know what to do next?
Overall, how satisfied were you with your experience on this website today?
vertical_align_top Back to top