January 24, 2024 at 05:06AM
The US, UK, and Australia have sanctioned Russian national Alexander Ermakov for his alleged involvement in the 2022 ransomware attack on Australia’s Medibank. Ermakov was linked to the cyberattack and targeted for the first time under Australian cyber sanction powers. The US and UK followed suit, imposing similar sanctions in solidarity with Australia. The sanctions prohibit dealing with Ermakov, including through cryptocurrency wallets or ransomware payments.
The meeting notes highlight the joint sanctions imposed by the United States, the United Kingdom, and Australia against a Russian national, Alexander Ermakov, accused of involvement in a ransomware attack on Australian healthcare insurer Medibank in October 2022. The attack resulted in the theft of personal information of nearly 10 million Australians, including sensitive medical details, which were posted on the dark web after the company refused to pay a ransom. These sanctions mark the first time Australia has imposed cyber sanction powers. Ermakov’s alleged role in the attack and his affiliation with the REvil ransomware group led to the coordinated sanctions by the three countries. As a result of the sanctions, entities in the US, UK, and Australia are prohibited from engaging with Ermakov, including through cryptocurrency wallets or ransomware payments.