UK Extends Ransomware Payment Ban to Protect Critical Infrastructure.

The UK government is expanding its ban on ransomware payments to the public sector and critical national infrastructure, including healthcare services, local councils, and energy providers, to disrupt cybercriminal operations. The ban aims to reduce financial incentives for cybercriminals and safeguard vital public services from disruption and financial harm. A mandatory reporting system will be introduced, requiring victims to submit incident reports within 72 hours and a comprehensive analysis within 28 days. The government is also exploring balanced enforcement strategies and expanding the prevention regime to cover the entire economy. Ransomware remains a top cybersecurity threat in the UK, with recent high-profile incidents highlighting the severe operational and reputational damage it can inflict.

The UK government has announced plans to expand its ban on ransomware payments to include public sector bodies and operators of critical national infrastructure. This move aims to disrupt cybercriminal operations and safeguard vital public services from disruption and financial harm [1].

The new ban, which will be implemented in 2025, targets healthcare services, local councils, energy providers, and other critical infrastructure operators. The government aims to reduce the financial incentives for cybercriminals by making ransom payments less attractive [2].

In addition to the ban, the government will introduce a mandatory reporting system. Victims of ransomware attacks will be required to submit incident reports within 72 hours and a comprehensive analysis within 28 days [3]. This system will provide law enforcement with essential intelligence to track down attackers and support victims.

The government is also exploring balanced enforcement strategies and expanding the prevention regime to cover the entire economy. This will involve developing a new 'payment prevention regime' that requires businesses to notify the government of their intention to pay ransom demands [3].

Ransomware remains a top cybersecurity threat in the UK, with recent high-profile incidents highlighting the severe operational and reputational damage it can inflict. The government's new measures aim to address this threat and protect the services the public relies on [1].

References:
[1] https://www.reuters.com/world/uk/uk-plans-ban-public-sector-bodies-paying-ransom-cyber-criminals-2025-07-22/
[2] https://www.bleepingcomputer.com/news/security/uk-to-ban-public-sector-orgs-from-paying-ransomware-gangs/
[3] https://www.pinsentmasons.com/out-law/news/ransomware-payments-ban-uk