Governments Weigh Ransomware Payment Bans as AI Fuels Attacks

Ransomware has evolved from opportunistic hacking into a professional criminal industry, with specialized groups handling network access, data theft, encryption and extortion. Governments including the UK are examining whether ransom payments by public bodies and critical infrastructure operators sustain that ecosystem and invite further attacks on health care, energy and government services. The debate has gained urgency as criminals become bolder and ransom demands continue to rise.

Governments are now considering legislation to restrict or prohibit public institutions and critical infrastructure from paying ransomware demands, although the reported proposals do not specify a common monetary threshold or an implementation date. Cybersecurity specialists also warn that widely available AI hacking tools are lowering technical barriers, helping attackers automate phishing, vulnerability exploitation and negotiations. That shift threatens to increase both the volume and sophistication of attacks while reinforcing ransomware’s increasingly corporate structure.