Australia Sanctions Russian National Over Medibank Data Breach

In a first, Australia imposes cyber sanctions, including financial penalties and a travel ban, on Aleksandr Ermakov, linked to the Russian cyber-crime gang REvil, for his role in the country's worst data breach.

Aleksandr Ermakov, a Russian national, has been sanctioned by the Australian government for his role in the country's worst data breach, which occurred in late 2022.
The breach involved the theft of personal information of 9.7 million Australians from Medibank, the country's largest health insurer. The stolen data included sensitive medical records, which were subsequently posted online.
The sanctions against Ermakov, which include financial penalties and a travel ban, are the first of their kind in Australia. They were imposed under cyber sanctions legislation passed in 2021.
Australian intelligence authorities have linked Ermakov to the infamous Russian cyber-crime gang REvil, which has been associated with attacks across Europe, the US, and UK.
The Australian government has warned businesses and individuals against paying ransoms to cyber criminals, arguing that it does not guarantee the recovery of data or prevent further attacks, and makes the country a more attractive target.