---
title: "Ransomware or cyber extortion payment report: fields on the ACSC form"
url: "https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts/ransomware-payment-report-fields"
type: "precedent"
site: "AI Law Framework"
id: "a24-ransomware-payment-report-fields"
area_id: "A24"
kind: "checklist"
ai_level: "yellow"
version: 1
task_ids: ["A24-T20261018-7"]
law_stated_as_at: "2026-10-22"
---

# Ransomware or cyber extortion payment report: fields on the ACSC form

> Field list for the ransomware and cyber extortion payment report on the cyber.gov.au form. The form cites section 27 of the Cyber Security Act 2024 and a 72-hour period.…

Canonical page: https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts/ransomware-payment-report-fields  
Law stated as at: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

Field list for the ransomware and cyber extortion payment report on the cyber.gov.au form. The form cites section 27 of the Cyber Security Act 2024 and a 72-hour period. It is not the SOCI Act incident report, which uses different clocks.

## Key facts

- Kind: Checklist. Steps or checks to work through and tick off.
- Practice area: [Technology, Media & Telecommunications / IT Contracts](https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts.md)
- Jurisdictions: Australia, Commonwealth
- AI level: Yellow. You and the tool draft together, with you directing. You check every statement you rely on.
- Law stated as at: 2026-10-22
- Status: Maintained. Checked on 2026-10-22 against the authority it cites, for Australia and Commonwealth.

## When to use it

Use when a business may have made a ransomware or cyber extortion payment, or another entity may have made one on its behalf. The how-to-report PDF was not opened. Do not use the 12-hour SOCI clock for this form.

## Used for these tasks

- [Prepare the ransomware or cyber extortion payment report](https://ailawframework.com/practice/technology-media-and-telecommunications-it-contracts/prepare-the-ransomware-or-cyber-extortion-payment-report.md)

## How AI may be used

AI may place facts the lawyer has already confirmed into the field names on the form. The lawyer decides whether a reporting business entity made a payment and what is lodged.

**AI may:**

- List each field on the form and the fact, if any, the file already states
- Record the date of the payment and the date the entity became aware, from documents the lawyer supplies
- Flag that a SOCI Part 2B incident report is a different obligation

**AI must not:**

- Must not lodge the report
- Must not invent malware, a vulnerability, or what was said to the extorting entity
- Must not apply the 12-hour significant-impact clock. That clock is on the CISC page, not this form

**The lawyer checks:**

- The entity is one of the three kinds the form lists
- The 72 hours is counted from the event the form describes, on the lawyer's instructions
- Only information the entity knows, or can find by reasonable search or enquiry, is included

## Authorities

- [Australian Signals Directorate, Australian Cyber Security Centre, Ransomware payment and cyber extortion payment reporting (form citing Cyber Security Act 2024 s 27 and a report within 72 hours)](https://www.cyber.gov.au/ransomware-payment-and-cyber-extortion-payment-reporting)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts/ransomware-payment-report-fields and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*