Security News > 2020 > January > N.Y. Could Ban Cities from Paying Ransomware Attackers

New York State may soon ban municipalities from paying ransomware demands in the event of a cyberattack.

The bill, S.B. S7246, proposes a blanket policy in New York State that's aimed at removing the incentive for ransomware operators to keep targeting its agencies, towns and cities.

"To incentivize these upgrades, the bill will prevent state and local governments from paying ransoms for ransomware attacks after January 1, 2022 by which time they should be able to sufficiently upgrade their cybersecurity systems."

Carson warned however that ransomware attacks could take on a more pernicious nature in the wake of such a bill's passage: "Criminals will not get paid for the cybercrime, so any ransomware targeting N.Y.-based companies means they will be destructive in nature," he added.

"Taxpayers are going to pick up the tab in lost services and bigger tax bills. Look how it worked out for Baltimorerather than tie the hands of decision-makers, the politicians need to get out of the way and make sure that municipalities have the resources and skills to prevent ransomware attacks."

News URL

https://threatpost.com/new-york-ban-cities-paying-ransomware/152233/