VerbatimParliament, as it happens

Royal Mail: Cybercrime

Asked by Graeme DownieLabourDepartment for Business, Innovation, Science and TradeTabled Answered 2 September 2026UIN 19662

The question

To ask the Secretary of State for Business, Innovation, Science and Trade, whether he has made an estimate of the cost to (i) Royal Mail and (ii) UK business of the LockBit ransomware attack on Royal Mail in 2023.

Answered by Department for Business, Innovation, Science and Trade

We do not routinely comment on costs of individual cyber attacks. Royal Mail's parent company, International Distributions Services (IDS), has publicly reported spending £10 million on remediation and systems resilience improvements following the incident affecting Royal Mail in 2023.

We know that cyber attacks can have serious consequences for businesses, with independent research finding that the average cost of a significant cyber incident is almost £195,000. The Government works closely with industry and relevant authorities to support resilience against cyber threats and to ensure risks are appropriately managed.

Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →

Open this question in Verbatim →

Every written question, searchable

155,000 questions tabled since the election, with the answer each department gave — and the ones still unanswered, with the clock running. Free to search.

Search written questions →Read on Verbatim