This consultation has
concluded
Read the full outcome
Government response to
ransomware legislative proposals: reducing payments to cyber
criminals and increasing incident reporting
Detail of outcome
The government's response to the consultation offers an overview
of the responses, key findings and sets out the next steps for
policy development.
We are aware this publication may have accessibility issues. We
are reviewing it so that we can fix these. Read more about
our accessible documents
policy.
Original consultation
Summary
The government is consulting on proposals to reduce the threat
posed by the criminal infection of computer systems with
malicious 'ransomware' software.
This consultation ran from
12:15am on 13 January 2025 to 5pm on 8 April
2025
Consultation description
Ransomware is malicious software (malware) that infects a
victim's computer system. A ransomware attack can:
- prevent the victim from accessing IT systems or severely
impair their use
- facilitate the theft of personal or other sensitive data held
on the victim's networked systems or devices
A ransom is demanded (normally payment of cryptocurrency) from
the victim to regain access to the system, for data to be
restored or for confidential data not to be published on websites
run by criminals.
The targets of ransomware can range from ordinary individuals
using their home computers and other personal devices, to major
companies and public bodies whose entire systems and networks are
put under attack.
The Home Office proposes to introduce legislation to counter
ransomware and meet three main objectives:
- to reduce the amount of money flowing to ransomware criminals
from the UK, thereby deterring criminals from attacking UK
organisations
- to increase the ability of operational agencies to disrupt
and investigate ransomware actors by increasing our intelligence
around the ransomware payment landscape
- to enhance the government's understanding of the threats in
this area to inform future interventions, including through
cooperation at international level
Documents
Ransomware legislative
proposals: reducing payments to cyber criminals and increasing
incident reporting (accessible)
Ransomware legislative
proposals: reducing payments to cyber criminals and increasing
incident reporting
Ransomware legislative
proposals: reducing payments to cyber criminals and increasing
incident reporting (Welsh accessible)
Ransomware legislative
proposals: reducing payments to cyber criminals and increasing
incident reporting (Welsh)
Ransomware consultation options
assessment (accessible version)
Ransomware consultation options
assessment
Ransomware consultation privacy
notice
