Cyber Extortion and Ransomware (Reporting) Bill
In progressCurrently at: 2nd reading in the Commons.
Originated in CommonsUpdated 1 May 2026
Where do you stand on this bill?
React anonymously — no account, no name, just a click.
Long title
A Bill to require a company that meets specified criteria to report any cyber extortion or ransomware attack on the company to the Government within a specified time after the attack; to make provision about the content of such reports, including a requirement to provide information about any payments made; and for connected purposes.
Progress through Parliament
- 1st reading· Commons
21 October 2025 – 21 October 2025
- 2nd reading· Commons
29 May 2026 – 29 May 2026
Source: UK Parliament Bills API. Bill ID: 4027.