Ransomware and Financial Stability Act of 2024

This bill requires systemically important U.S. financial institutions (including major exchanges and core technology providers) to notify the Financial Crimes Enforcement Network before making ransomware payments exceeding $100,000. It establishes a process where federal law enforcement must issue a "ransomware payment authorization" for payments above that threshold, with institutions protected from liability if they follow the authorization. The bill mandates confidential reporting of attacks and payments to authorities, while prohibiting public disclosure of submitted information except for limited exceptions like congressional requests. It includes a 10-year sunset provision, after which the requirements expire.