The Ransomware Crimes Bill: what activities are caught?

The Crimes Legislation Amendment (Ransomware Action Plan) Bill 2022 (Ransomware Crimes Bill) was introduced into the House of Representatives on 17 February 2022. It gives effect to key components of the Australian Government's Ransomware Action Plan (Plan), primarily to create specific offences for ransomware attacks and related financial crimes.

Interestingly, the Ransomware Crimes Bill was introduced just three days after the Ransomware Payments Bill 2021 (introduced by the federal opposition prior to the publication of the Plan) was withdrawn from Parliament. The Ransomware Payments Bill would have required certain businesses to report any ransomware payments to the Australian Cyber Security Centre. The Government has signalled a broader 'ransomware incident' reporting regime in the Plan but that has yet to be introduced.