NCSC CEO warns ransomware presents "most immediate danger" to the UK
Lindy Cameron named Russia as the main culprit behind the UK’s ransomware woes


Ransomware “presents the most immediate danger to the UK”, according to the head of the National Cyber Security Centre (NCSC).
NCSC CEO Lindy Cameron issued the warning as part of her speech during Monday’s Cyber 2021 conference at Chatham House.
Reflecting on her first year as NCSC CEO, Cameron said that the body has witnessed “real-world impact from a spate of ransomware attacks” which had caused “significant damage (...) to the public sector”.
The ransomware attacks on Ireland’s Health Service Executive (HSE) and London’s Hackney Borough Council were among the examples listed by Cameron, who also mentioned US incidents targeting SolarWinds and Colonial Pipeline.
Despite the rise in attacks, many UK organisations “have no incident response plans, or ever test their cyber defences,” she added.
The speech comes days after a report found that only a third (35.8%) of businesses have insurance cover for ransomware attacks, despite it being one of the most common forms of cyber threat. Almost one in six (15.9%) of respondents also reported having no disaster recovery plan in place, making them unprepared to deal with a potential attack.
Cameron also advised organisations to not succumb to hackers’ financial demands, saying that the NCSC expects ransomware to “continue to be an attractive route for criminals as long as organisations remain vulnerable and continue to pay”.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
RELATED RESOURCE
The best defence against ransomware
How ransomware is evolving and how to defend against it
“We have been clear that paying ransoms emboldens these criminal groups – and it also does not guarantee your data will be returned intact, or indeed returned at all,” she added.
Russia was named the culprit of the UK’s ransomware woes, with the NCSC and the National Crime Agency (NCA) finding that “cyber criminals based in Russia and neighbouring countries are responsible for most of the devastating ransomware attacks against UK targets”.
China, North Korea, and Iran were also found to be threats to the UK’s cyber security – Cameron said that, although the latter two states are “less sophisticated than Russia and China”, they “regularly use digital intrusions to achieve their objectives – including through theft and sabotage”.
Russia had been found to be behind last year’s attack on SolarWinds, with US and UK security agencies also publishing a joint advisory warning against a ‘global brute force campaign’ orchestrated by the Russian government.
Having only graduated from City University in 2019, Sabina has already demonstrated her abilities as a keen writer and effective journalist. Currently a content writer for Drapers, Sabina spent a number of years writing for ITPro, specialising in networking and telecommunications, as well as charting the efforts of technology companies to improve their inclusion and diversity strategies, a topic close to her heart.
Sabina has also held a number of editorial roles at Harper's Bazaar, Cube Collective, and HighClouds.
-
A flaw in Google’s new Gemini CLI tool could’ve allowed hackers to exfiltrate data
News The company has moved to fix a vulnerability that allowed the execution of malicious code
-
AI skills shortages exacerbated by surging salary demands
News Hiring staff with AI skills continues to be a pain point for companies
-
Hackers breached a 158 year old company by guessing an employee password – experts say it’s a ‘pertinent reminder’ of the devastating impact of cyber crime
News A Panorama documentary exposed hackers' techniques and talked to the teams trying to tackle them
-
The ransomware boom shows no signs of letting up – and these groups are causing the most chaos
News Thousands of ransomware cases have already been posted on the dark web this year
-
Everything we know about the Ingram Micro cyber attack so far
News A cyber attack on Ingram Micro severely disrupted operations and has been claimed by the SafePay ransomware group.
-
A prolific ransomware group says it’s shutting down and giving out free decryption keys to victims – but cyber experts warn it's not exactly a 'gesture of goodwill'
News The Hunters International ransomware group is rebranding and switching tactics
-
Swiss government data published following supply chain attack – here’s what we know about the culprits
News Radix, a non-profit organization in the health promotion sector, supplies a number of federal offices, whose data has apparently been accessed.
-
Ransomware victims are getting better at haggling with hackers
News While nearly half of companies paid a ransom to get their data back last year, victims are taking an increasingly hard line with hackers to strike fair deals.
-
LockBit data dump reveals a treasure trove of intel on the notorious hacker group
News An analysis of May's SQL database dump shows how much LockBit was really making
-
‘I take pleasure in thinking I can rid society of at least some of them’: A cyber vigilante is dumping information on notorious ransomware criminals – and security experts say police will be keeping close tabs
News An anonymous whistleblower has released large amounts of data allegedly linked to the ransomware gangs