A service from mySociety A service from mySociety

TheyWorkForYou

Menu

Cyber Security and Resilience (Network and Information Systems) Bill

Part of the debate – in the House of Commons at 12:51 pm on 6 January 2026.

Alert me about debates like this

Photo of Ian Murray Ian Murray The Minister of State, Department for Culture, Media and Sport, Minister of State (Department for Science, Innovation and Technology) 12:51, 6 January 2026

I beg to move, That the Bill be now read a Second time.

A happy new year to you, Mr Speaker, and to all the House staff. This is the first opportunity I have had to say that to you.

On 3 June 2024, a busy Monday morning in south-east London, criminals attacked Synnovis, an organisation that processes blood tests on behalf of our national health service. They did not turn up physically, but logged on to computers thousands of miles away and set off ransomware—malicious software that encrypts files from afar, making them unusable. The attack had a ripple effect across London hospitals. It delayed 11,000 appointments, blood transfusions had to be suspended and the company lost tens of millions of pounds.

This was not an isolated case. In the year leading up to September 2025, the National Cyber Security Centre dealt with 204 “nationally significant” incidents, meaning that they seriously disrupted central Government or our critical public services. That is more than double the 89 incidents in 2024. No one disputes that we must do everything we can to protect the UK from these attacks. The UK is the most targeted country by cyber-attacks in Europe, and it was the fifth most targeted nation in 2024 by nation state-affiliated threat actors. In 2024, it is estimated that UK businesses experienced over 8.5 million cyber-crimes in the 12 months preceding the survey, and that in that year more than four in 10, or 43%, of UK businesses were subject to a cyber-attack, affecting more than 600,000 businesses in total.

Significantly, cyber-attacks are estimated to cost UK businesses almost £15 billion each year, equivalent to 0.5% of the UK’s annual GDP, notwithstanding the wider economic effects of intellectual property theft or the experience of patients, as in the first example. The average cost of a significant cyber-attack for an individual business in the United Kingdom is estimated to be just over £190,000. There has been a 200% increase in global cyber-attacks on rail systems in the past five years, increasing the likelihood of severe disruption to the economy and to people’s daily lives.

intellectual property

patents (for inventions), trade marks, protected designs, and copyrights; see http://www.patent.gov.uk

Speaker

The Speaker is an MP who has been elected to act as Chairman during debates in the House of Commons. He or she is responsible for ensuring that the rules laid down by the House for the carrying out of its business are observed. It is the Speaker who calls MPs to speak, and maintains order in the House. He or she acts as the House's representative in its relations with outside bodies and the other elements of Parliament such as the Lords and the Monarch. The Speaker is also responsible for protecting the interests of minorities in the House. He or she must ensure that the holders of an opinion, however unpopular, are allowed to put across their view without undue obstruction. It is also the Speaker who reprimands, on behalf of the House, an MP brought to the Bar of the House. In the case of disobedience the Speaker can 'name' an MP which results in their suspension from the House for a period. The Speaker must be impartial in all matters. He or she is elected by MPs in the House of Commons but then ceases to be involved in party politics. All sides in the House rely on the Speaker's disinterest. Even after retirement a former Speaker will not take part in political issues. Taking on the office means losing close contact with old colleagues and keeping apart from all groups and interests, even avoiding using the House of Commons dining rooms or bars. The Speaker continues as a Member of Parliament dealing with constituent's letters and problems. By tradition other candidates from the major parties do not contest the Speaker's seat at a General Election. The Speakership dates back to 1377 when Sir Thomas Hungerford was appointed to the role. The title Speaker comes from the fact that the Speaker was the official spokesman of the House of Commons to the Monarch. In the early years of the office, several Speakers suffered violent deaths when they presented unwelcome news to the King. Further information can be obtained from factsheet M2 on the UK Parliament website.