UK TAKES GLOBAL LEAD IN FIGHT AGAINST RANSOMWARE SUPPLY-CHAIN ATTACKS
UK Steps Up Global Battle to Stop Ransomware Threats to Supply Chains
Britain is leading a new international push to protect critical businesses and public services from the growing threat of ransomware attacks that can cripple supply chains and cause multimillion-pound losses.
At a global Counter Ransomware Initiative (CRI) summit co-hosted by the UK and Singapore, world leaders have agreed a new set of guidelines to strengthen corporate defences against cyber-criminal gangs. Sixty-seven countries have endorsed the measures, which outline how companies can identify weaknesses in their supply chains before attackers exploit them.
The initiative comes as the frequency and sophistication of ransomware assaults continue to rise. In one of the most disruptive incidents to date, a cyber-criminal group attacked Synnovis — a pathology supplier to several NHS Trusts — in June 2024, forcing thousands of appointments and surgeries to be cancelled.
Strengthening business resilience
The UK government said the new framework will help firms assess the security of their suppliers and take practical steps to prevent cascading damage across interconnected networks.
Security Minister Dan Jarvis said: “Ransomware and cyber-attacks pose an immediate and urgent threat to our nation’s security and economy. We are taking decisive action to counter this threat, but global coordination is essential. Cyber security must be a top priority for all businesses. It’s vital that the Counter Ransomware guidance is followed and strong measures are taken to defend against these destructive attacks.”
According to the National Cyber Security Centre (NCSC), 204 nationally significant cyber incidents were handled in the past year — the highest on record.
Business impact and lessons learned
Shirine Khoury-Haq, Chief Executive of the Co-op, said her organisation had experienced first-hand the damage a major cyber breach can cause.
“As the victim of a sophisticated cyber-attack, we know the damage and disruption they cause to businesses and communities, and we welcome the government’s focus on cyber crime. Meticulously planning, investing in the right tools and running countless exercises are vital, but even so, nothing truly prepares you for the moment a real cyber event unfolds.
“The intensity, urgency and unpredictability of a live attack is unlike anything you can rehearse. What matters most is learning, building resilience, and supporting each other to prevent future harm. This is a positive step in the right direction for building a safer digital future.”
NCSC Director for National Resilience Jonathon Ellison added: “A ransomware attack on one organisation can severely disrupt entire supply chains, affecting businesses and services across the UK and beyond. We know that many of these incidents are preventable by implementing basic cyber security measures, such as the UK’s Cyber Essentials certification. We strongly urge organisations to follow the NCSC’s supply chain security guidance to help protect themselves, their partners, and the UK’s national cyber resilience.”
A united global front
Ransomware attacks on global supply chains can damage economies far beyond national borders, halting production and trade routes. To enhance cross-border cooperation, the UK is also expected to sign the United Nations Convention against Cybercrime this weekend in Vietnam.
The convention will for the first time harmonise laws that criminalise cyber-enabled offences, from online fraud to the non-consensual sharing of intimate images. It will also expand the international 24/7 network that connects law-enforcement agencies worldwide, allowing faster response to cross-border cyber threats.
These developments build on the UK government’s plan to ban public-sector organisations — including NHS trusts, schools and councils — from paying ransom demands, a move intended to undercut cyber-criminals’ business model and deter future attacks.
By taking the lead in shaping international policy, the UK aims to build a more resilient global digital economy — one where businesses, governments and individuals share responsibility for keeping data and systems secure.
For more information, visit gov.uk/supply-chain-resilience-against-ransomware.
