In a significant move to fortify the United Kingdom’s cyber defenses, the UK government has unveiled proposals that could ban all public sector bodies and critical national infrastructure from making ransomware payments.

These proposals are part of a new Home Office consultation intended to extend the current ban on government departments from submitting to ransomware demands.

Ransomware attacks have become an increasingly prevalent threat, with cybercriminals often demanding payments in exchange for unlocking or returning files they have compromised.

The newly proposed measures include a ransomware payment prevention regime aimed at heightening the National Crime Agency’s (NCA) visibility on active attacks.

This would involve the blocking of payments to known criminal groups and sanctioned entities, alongside mandatory reporting of ransomware incidents to enhance law enforcement intelligence.

Security Minister Dan Jarvis emphasized the importance of these measures in addressing the growing cyber threat landscape: “Driving down cyber crime is central to this Government’s missions to reduce crime, deliver growth, and keep the British people safe.

With an estimated one billion dollars flowing to ransomware criminals globally in 2023, it is vital we act to protect national security as a key foundation upon which this Government’s Plan for Change is built.”

The proposals are designed to make national infrastructure and public sector organizations such as the NHS, local councils, and schools less appealing to cybercriminals.

Recent ransomware incidents, including attacks on a major supplier to London Hospitals and the Royal Mail, underscore the urgency of enhanced protective measures.

Richard Horne, a leading figure at the UK’s National Cyber Security Centre (NCSC), noted: “This consultation marks a vital step in our efforts to protect the UK from the crippling effects of ransomware attacks and the associated economic and societal costs.” Horne urges organizations to bolster their defenses and prepare contingency plans to maintain operations in the event of a cyber attack.

Paul Foster, Deputy Director and head of the NCA’s National Cyber Crime Unit, underscored the magnitude of the ransomware threat: “Ransomware is the most significant cybercrime threat facing the UK and the world, with attacks costing millions in terms of losses and recovery.”

The NCA’s recent success in dismantling the notorious LockBit ransomware network exemplifies the potential impact of these proposals.

The international investigation led to arrests, the sanctioning of criminals, and the exposure of LockBit’s infrastructure, demonstrating the effectiveness of targeted law enforcement efforts.

The consultation represents a crucial initiative in the UK’s strategic response to cyber threats, aiming to disrupt the financial dependencies of cybercriminal networks and safeguard essential services from severe disruptions.