Some of the potential reforms include making it illegal to pay ransoms to hackers like those who posted highly sensitive customer data from Medibank on the dark web.