UK Launches Bold Crackdown: Public Sector and Critical Infrastructure Banned from Paying Ransomware Demands

The UK government is introducing sweeping new regulations that will ban public sector bodies and operators of critical national infrastructure from paying ransoms to cybercriminals.

This move comes after a surge in high-profile ransomware attacks targeting essential services like the NHS, schools, and local councils. The new measures also require private businesses to notify authorities before making any ransom payments, aiming to disrupt the business model of cybercriminal gangs. Officials hope the ban will deter attacks by removing the financial incentive for hackers, while also improving transparency and enabling more effective law enforcement responses.

The policy has received strong support in public consultations, though some experts warn of potential challenges in enforcement and unintended consequences.