In coordination with Australia and the United Kingdom, the United States is designating a Russian cyber actor involved in the 2022 ransomware attack against an Australian healthcare insurer.  Today’s action, our first trilateral sanctions action using our respective cyber sanctions regimes, strengthens our partnership in the fight against malicious cyber actors.

Russia continues to provide a safe haven to ransomware actors and enable ransomware attacks by cultivating and co-opting criminal hackers who have launched disruptive ransomware attacks against U.S. and allied countries.  We will continue to stand with our partners to disrupt ransomware actors that threaten our economies and critical infrastructure.

The Department of the Treasury is taking these actions pursuant to Executive Order 13694, as amended.  For more information on this designation, see Treasury’s press release.

U.S. Department of State

The Lessons of 1989: Freedom and Our Future