SSS · Data Breach & Cyber Incident Response

Is paying a ransom unlawful?

A decision to pay carries serious risks in terms of sanctions lists, anti-money-laundering legislation, and insurance policy terms. The decision should not be taken alone; it should be docu…

Updated · July 20261 min readCategory · Data Breach & Cyber Incident Response
Short answer

A decision to pay carries serious risks in terms of sanctions lists, anti-money-laundering legislation, and insurance policy terms. The decision should not be taken alone; it should be documented with a legal assessment.

A decision to pay carries serious risks in terms of sanctions lists, anti-money-laundering legislation, and insurance policy terms. The decision should not be taken alone; it should be documented with a legal assessment.

Before any payment is even discussed, the threat actor should be screened against sanctions lists — a transfer to a listed entity can itself be an offence, regardless of the ransom question. Involve law enforcement early and route the decision through counsel and your insurer together; a unilateral payment is the riskiest path.

Shall we apply this matter to your situation?

Tell us your specific situation in a few sentences; we'll assess it with the right team.

Get in touch
This content is for general information only and does not constitute legal advice. Please contact our team for an assessment of your specific circumstances.
Categories
Data Breach & Cyber Incident Response

The right start means a predictable process.

From the first meeting to completion of the work; let's plan every step transparently.