UK Cracks Down on Ransomware: Public Sector and Critical Infrastructure Banned from Paying Hackers

The UK government is introducing strict new laws banning public sector bodies and operators of critical national infrastructure from paying ransoms to cybercriminals.

The measures also require businesses to report any intent to pay a ransom, aiming to disrupt the financial incentives driving ransomware attacks. This move follows a surge in high-profile cyberattacks on British institutions, including the NHS and major retailers. The government hopes these steps will deter hackers by making the UK a less lucrative target and improve national cyber resilience.

The proposals have received strong support from industry and the public, though some experts warn of potential challenges in enforcement.