ransomware ban

The ransomware ban tag covers discussion of the UK's proposed restrictions on ransomware payments by public-sector bodies and critical national infrastructure operators. It also follows plans requiring other organisations to notify authorities before making a payment, based on the government's 2025 consultation response. The coverage treats ransomware as a national resilience issue rather than only a private IT incident, while recognising that payment restrictions do not eliminate attacks or guarantee a straightforward recovery for hospitals, councils, utilities, suppliers, and businesses. Readers can use this archive to follow the policy debate, reporting expectations, and concerns about how organisations would respond when facing cyber extortion.