UK Authorities Weigh Nationwide Prohibition on Ransom Payments by Essential Infrastructure Providers

16

The UK government has commenced a consultation to evaluate a potential prohibition on ransomware payments for operators of essential national infrastructure.

The initiative, revealed by the Home Office on January 14, proposes a “targeted ban” that would encompass sectors such as energy, healthcare, and local councils, extending the existing ban for government departments.

Ransomware perpetrators typically request cryptocurrency as payment. Similar restrictions have been contemplated by other nations, including Australia and the United States, as a strategy to mitigate cybercriminal activities.

UK Aims to Diminish Cybercriminal Financing for National Security

UK Security Minister Dan Jarvis stated that the proposal seeks to enhance national security by cutting off financial resources for cybercriminals.

“These proposals assist us in addressing the scale of the ransomware threat, targeting these criminal networks in their finances and severing the crucial monetary pipeline they rely on to function,” Jarvis remarked.

The Home Office clarified that the suggested measures would render critical services less appealing targets for cyberattacks.

Additional components of the proposal include establishing a framework to prevent ransomware payments by offering victims guidance and mechanisms to block payments to identified criminal organizations and sanctioned entities.

A mandatory reporting framework for ransomware incidents is also under consideration to improve law enforcement’s ability to track and dismantle repeat offenders.

This consultation follows a series of high-profile cyberattacks within the UK.

In January 2023, the Royal Mail experienced a ransomware attack that disrupted international shipping operations, while an August 2022 breach at Advanced Computer Software Group exposed the personal information of nearly 83,000 individuals.

According to the Home Office, such incidents have had “devastating impacts” on public services.

Ransomware attacks threaten our national security & harm our economy.
We are taking steps to deter the cyber criminals responsible by disrupting & dismantling their business models.
Our objective is clear: safeguard our national security & economic prosperity. pic.twitter.com/8DFrXtYlfI

— Dan Jarvis MP (@DanJarvisMBE) January 14, 2025

The National Cyber Security Centre (NCSC) reported managing 430 cyber incidents in the year ending August 2024, including 13 nationally significant attacks that caused severe damage to essential services or the economy.

The 2024 NCSC Annual Review identified ransomware attacks as the most immediate and disruptive cyber threat.

Noteworthy incidents included a June 2024 attack on Synnovis, which postponed medical procedures, and an October attack on the British Library that compromised its online systems.

The consultation, scheduled to continue until April 8, highlights the growing global effort to address ransomware threats.

Australia and the U.S. have similarly considered bans on ransomware payments.

UK Introduces Crypto Regulations

In September, the UK government presented a new bill aimed at clarifying the classification of digital assets, including non-fungible tokens (NFTs), cryptocurrencies, and carbon credits, as “property” and “personal property” under the country’s property laws.

The UK has been among the nations that have intensified regulatory measures following several high-profile bankruptcies last year.

The Financial Conduct Authority (FCA) oversees cryptocurrency activities, focusing on anti-money laundering regulations and consumer protection.

Last year, the FCA implemented new rules requiring cryptocurrency firms to register with the financial regulator and have their marketing materials approved by an FCA-authorized entity.

Key updates include exchanges providing clear warnings to customers regarding the risks associated with cryptocurrency investments.

The FCA has cautioned that non-compliance could result in criminal charges, including unlimited fines and up to two years’ imprisonment, for both domestic and foreign exchanges operating within the UK.

The post UK Government Considers National Ban on Ransomware Payments by Vital Infrastructure Operators appeared first on Cryptonews.