Australia sanctions Russian hacker over Medibank cyberattack

The federal government says it has used cyber sanctions powers on a Russian individual for his role in the breach of the Medibank Private network.

Defence Minister Richard Marles (left) has announced that cyber sanctions have been imposed on Russian national Aleksandr Ermakov (right) for his alleged role in the Medibank cyber breach. Source: AAP / Mick Tsikas / Department of Foreign Affairs and Trade

Key Points

• A Russian hacker has been named by the federal government as being behind the Medibank data breach.
• The government has used cyber sanction powers for the first time against the Russian.
• New sanctions have also been imposed against Hamas and Hezbollah.

The federal government has imposed cyber sanctions against a Russian national over their alleged role in the Medibank Private data breach.

Deputy Prime Minister Richard Marles said the government had, in a first, used Australia’s autonomous cyber sanctions framework to impose the sanctions on Russian man Aleksandr Ermakov, who he said participated in the 2022 cyberattack on Medibank.

"The sanctions that are put in place on Aleksandr Ermakov today and publicly naming him will have an enormous impact on his activities and send a very strong message to cyber-criminals around the world that we mean business," he told reporters on Tuesday.

Almost 10 million records were stolen, including names, dates of birth, Medicare numbers, and sensitive medical information with some records published on the dark web, Marles said.

"Over the last few years, we've seen the consequence of cyberattacks across the country ... and the world. This is one of the great challenges that faces our country and economy today," he said.

Home Affairs Minister Clare O'Neil said the Medibank hackers were "cowards and scum bags".

"They hide behind technology and today the Australian government is saying, that when we put our minds to it, we'll unveil who you are, and we'll make sure you are accountable," she said.

Foreign Minister Penny Wong said the Medibank breach was an "egregious violation" that impacted some of "the most vulnerable members" of the public.

Aleksandr Ermakov (pictured) has been named by the Australian government as being behind the Medibank cyber attack. Credit: DFAT

The sanctions mean it will be a criminal offence, punishable with up to 10 years' jail, to provide assets to Ermakov or to use or deal with these assets, including through cryptocurrency, or ransomware payments.

Australia imposes more sanctions against Hamas, Hezbollah

Separately, the government has also imposed counter-terrorism financing sanctions on 12 people and three entities linked to Hamas, Hezbollah and Palestinian Islamic Jihad.

Among those sanctioned include leaders of Hamas, financial facilitators and people who have provided "training to terrorist operatives", as well as three entities that have facilitated the transfer of funds to Hamas, Wong said.

Wong said the move was concurrent with further sanctions imposed on Hamas-linked targets by the United States, United Kingdom, and European Union.