Question to the Home Office:

To ask the Secretary of State for the Home Department, whether the Government plans to introduce mandatory reporting of ransomware incidents and payments.

Last year, the Government consulted on a package of legislative measures to tackle ransomware, including the introduction of mandatory reporting requirements. The consultation demonstrated strong support for greater transparency, with 63% of respondents backing an economy-wide reporting regime covering both ransomware incidents and ransom payments.

The proposed measures are intended to strike at the ransomware business model by increasing the information available to law enforcement and improving the Government’s understanding of the threat landscape. Bringing ransomware activity out of the shadows will enhance the intelligence picture and support more effective disruption of those responsible.