Operation Aquila was an 18-month investigation by Australia's signals directorate and federal police that identified Aleksandr Gennadievich Ermakov as the perpetrator behind the Medibank Private data breach and linked him to the SugarLocker ransomware.