Two bills have
been introduced into the New York State Senate that if passed would ban municipalities
from paying money demanded by ransomware attackers.
The bills are
introduced, by Sen. Phil Boyle, (R), and S7289,
introduced by Sen. David Carlucci (D).
bill would make it specifically illegal for local governments to use taxpayer
dollars to pay a ransom, while the latter piece of legislation bans the
municipal corporation or 4 other government entity shall pay ransom in the
event of a cyber-attack 5 against such municipal corporation or such government
entity,” states S7289, while S7246 says, “Notwithstanding any other provision
of law, after January first, 4 two thousand twenty-two, local and state
taxpayer moneys shall not be 5 used to pay ransoms in response to ransomware
also establish the Cyber-Security Enhancement Fund, which will contain $5
million and be used to increase training and upgrading cybersecurity for municipalities
with a population of less than one million.
are similar to a resolution passed in July 2019 by the United
States Conference of Mayors that stated the group stands against paying
ransoms in the event of an IT security breach as such an act merely encourages