UK Bans Public Sector from Paying Ransomware Gangs

The UK government has announced a comprehensive ban preventing public sector organizations from paying ransom demands to cybercriminals, marking a significant escalation in the fight against ransomware attacks that cost the British economy millions of pounds annually.

The new measures will prohibit NHS trusts, local councils, schools, and other critical national infrastructure operators from making ransom payments to criminal groups.

Nearly three-quarters of consultation respondents supported the proposal, which aims to disrupt the business model that makes ransomware attacks profitable for cybercriminals.

Targeting Criminal Business Models

“Ransomware is a predatory crime that puts the public at risk, wrecks livelihoods and threatens the services we depend on,” said Security Minister Dan Jarvis. “That’s why we’re determined to smash the cyber criminal business model and protect the services we all rely on as we deliver our Plan for Change.”

The ban specifically targets the financial incentive structure that fuels ransomware ...