UK Launches Bold Crackdown: Public Sector and Critical Infrastructure Banned from Paying Ransomware Demands

The UK government is introducing sweeping new regulations that will ban public sector bodies and operators of critical national infrastructure from paying ransoms to cybercriminals.

The move comes after a surge in high-profile ransomware attacks targeting essential services like the NHS, local councils, and major retailers. Under the new rules, private businesses must notify authorities before making any ransom payments, aiming to increase transparency and enable targeted law enforcement action. Officials hope these measures will disrupt the business model of cybercriminals and better protect vital public services.

The proposals have received strong support from industry and are considered among the strictest anti-ransomware laws globally.