UK Proposes Ban on Ransomware Payments for Public Sector and Critical Infrastructure

The UK government aims to combat cybercrime by prohibiting ransomware payments in the public sector, following strong support from a recent consultation.

Summary

The UK government is moving to ban ransomware payments by public sector entities and critical national infrastructure, expanding an existing prohibition on government departments. This initiative includes a mandatory reporting system for victims planning to pay ransoms, requiring them to report details within 72 hours. Security Minister Dan Jarvis emphasized the commitment to dismantling cybercriminal operations. The public consultation showed significant backing for the ban, though opinions on penalties for violations varied. Ransomware attacks remain a critical threat, affecting major institutions recently.

Terms & Concepts
  • Ransomware: Malicious software that encrypts data, demanding payment, typically in cryptocurrency, to restore access.
  • Mandatory Reporting System: A regulatory requirement for victims of ransomware to report their intentions to pay ransoms to the government within a specified timeframe.
  • Critical National Infrastructure: Essential services and facilities that are vital for the functioning of a society, including energy, health, and local government services.