The UK government is aiming to take decisive action against cyber criminals with a new crackdown on ransomware attacks, looking to safeguard hospitals, businesses, and critical national services. Following a public consultation on ransomware proposals, the government has announced a series of measures designed to undermine the criminal business model and protect the public from increasingly sophisticated cyber threats.
What is Ransomware and why is the UK taking action?
Ransomware is malicious software used by cyber criminals to infiltrate computer systems, encrypt data, and demand ransom payments for its release. These attacks cost the UK economy millions of pounds annually and have caused severe operational and financial damage. In some cases, ransomware attacks have even endangered lives, with a recent NHS incident linked to a patient’s death.
High-profile ransomware attacks on public institutions and major retailers like Co-op have exposed the vulnerabilities within critical infrastructure. In response, the UK government is implementing tougher anti-ransomware measures to protect vital services and disrupt cybercriminal networks.
Key measures to combat ransomware
Under the new proposals, public sector organisations and operators of critical national infrastructure—including the NHS, schools, and local councils—will be banned from paying ransom demands. This move, backed by nearly three-quarters of consultation respondents, aims to cut off the financial lifeline that fuels ransomware operations.
For businesses not covered by the ban, a mandatory reporting requirement will be introduced. Companies intending to pay a ransom must notify the government, enabling authorities to provide legal and security advice. This measure also ensures businesses avoid inadvertently transferring funds to sanctioned cyber groups, many of which are based in Russia.
In addition, a mandatory ransomware incident reporting regime is being developed to improve intelligence-sharing and law enforcement’s ability to track and disrupt cyber criminals.
Government and industry collaboration
Security Minister Dan Jarvis emphasised the UK’s commitment to “smash the cyber criminal business model” and deliver on the government’s Plan for Change. The measures were developed in close consultation with industry leaders and security experts, reflecting a united front against ransomware attacks.
Jonathon Ellison, Director of National Resilience at the National Cyber Security Centre (NCSC), praised the initiative, stating that these actions will “undermine the criminal ecosystem” and urged organisations to adopt proven cybersecurity frameworks like Cyber Essentials and the NCSC’s Early Warning service.
Building a safer digital future
The government is also urging all organisations to strengthen their resilience against ransomware attacks by:
- Maintaining offline data backups.
- Developing tested contingency plans to operate without IT systems.
- Creating robust recovery strategies to restore systems swiftly.
Co-op CEO Shirine Khoury-Haq welcomed the measures, noting that cyber-attacks can severely disrupt businesses and communities. She called for collective efforts to build resilience and prevent future harm.
These robust proposals position the UK as a global leader in the fight against ransomware, safeguarding businesses, public services, and national infrastructure from cyber threats while fostering a safer digital environment for all.
Read next: Driving AI innovation and national growth – Build in Digital
Are you a building professional? Sign up for a FREE MEMBERSHIP to upload news stories, post job vacancies, and connect with colleagues on our secure social feed.
