UK Bans Public Sector Ransom Payments, Mandates Reporting
The UK government is taking decisive action against ransomware attacks, which have caused significant harm and cost the economy millions of pounds annually. A new package of measures includes a ban on certain sectors paying ransom demands and a mandatory reporting regime to bolster law enforcement's response.
The UK has suffered several high-profile ransomware attacks, including the 'WannaCry' incident in 2017 and a recent attack on the British Library in 2023. The most alarming case was the ransomware attack on the NHS, which was cited as a factor contributing to a patient's death. In response, the government is introducing a ban on public sector bodies and operators of critical national infrastructure from paying ransom demands. This includes the state-run health service, local councils, and schools.
The ban is part of a wider package of measures developed by the US Treasury Department’s Financial Crimes Enforcement Network (FinCEN), which is also working on regulations related to cryptocurrency mixing and privacy tools under the Biden administration. Mandatory reporting is being developed to equip law enforcement with essential intelligence to deal with perpetrators and disrupt their activities. Businesses not covered by the ban would be required to notify the government of any intent to pay a ransom for advice and support.
The UK's new ransomware measures, including the ban on certain sectors paying ransom demands and mandatory reporting, aim to disrupt cybercriminal activities and protect the public. Security minister Dan Jarvis has stated that the UK is united in the fight against ransomware, demonstrating the government's commitment to tackling this growing threat.
