A Russian citizen has been penalized by the Australian authorities for participating in a cyber intrusion that exposed the personal data of over 10 million individuals in Australia.

In October 2022, an individual released client information from Medibank, the biggest health insurance provider in Australia, which included information about HIV diagnoses and drug abuse treatment. This came after the company declined to pay a ransom for the personal data of both present and former customers.

The Australian government used its cyber sanction powers for the first time on Tuesday against Aleksandr Ermakov, a Russian citizen who was linked to a cyber attack by the Australian Federal Police and intelligence agencies with assistance from undisclosed international partners.

Richard Marles, the Deputy Prime Minister of Australia, stated that the sanctions put in place are a part of the country’s attempts to uncover and weaken cyber criminals and organizations involved in cyber attacks.

Marles stated on Tuesday that in our present strategic situation, we are witnessing malicious cyber attacks aimed at governments, critical infrastructure, businesses, and households in Australia.

“We remain committed to collaborating with our allies and associates globally to hold cyber offenders accountable for their actions. We will relentlessly pursue efforts to disrupt their ability to target Australians in the digital realm.”

This penalty renders it illegal to provide assets to Ermakov, punishable by a maximum of 10 years in prison. It also prohibits the use or handling of his assets, including through cryptocurrency wallets or ransomware payments.

The Foreign Affairs Minister, Penny Wong, stated that the sanction serves as a direct message to cyber criminals.

She stated that there are penalties and repercussions for specifically targeting Australia and its citizens.

Source: wral.com