What’s in the template
What The Ransomware Payment Report Asks For From Businesses
Designed for fast, accurate lodgement with step-by-step fields and final checklist to confirm completeness.
Entity Identifiers
Legal name, ABN, registered address and primary contact details
Incident Timeline & Impact
When it occurred and was discovered, systems and data affected, customer impact, known malware/variant, initial entry point or vulnerability (if known)
Extortion Demand
What was requested, by whom (if known), channel used, and any payment destination details provided
Payment or Benefit Provided
Amount or value, method (e.g. cryptocurrency, transfer, service), date/time, and any transaction reference or hash
Communications Log
Timestamps and concise summaries of messages or negotiations with the extorting party or intermediaries
Submission Checklist
A final pass to confirm completeness and note any “not known at time of submission” items
