Treasury ordered to study ransomware response gaps at banks
H.R. 807 — Public and Private Sector Ransomware Response Coordination Act of 2025 · Filed by Zachary (Zach) Nunn (R-IA) · 2 cosponsors · Introduced Jan 28, 2025 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill directs the Treasury Secretary to study and report on how well the government and private financial institutions coordinate to prevent and respond to ransomware attacks. The report will examine information-sharing gaps, whether current reporting rules are useful, and recommend policy changes to improve coordination and speed up incident response.
Why we flagged it
The bill's sole operative mechanism is a fact-finding and reporting requirement. It does not create new law, impose restrictions, or allocate funds—it mandates a Treasury study on ransomware response coordination to inform future legislative action.
What the text implies
- Report may reveal that financial institutions deliberately withhold ransomware attack information from government, potentially exposing regulatory or liability concerns that could drive future enforcement or legislative action.
- Classified annex provision allows sensitive cybersecurity findings to be withheld from public view, limiting transparency despite the bill's stated unclassified form.
- Study may identify gaps in current reporting requirements, potentially leading to new mandatory disclosure rules that could increase compliance costs for smaller financial institutions.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
Ransomware attacks on financial institutions threaten ordinary people's deposits, credit, and financial security. This bill creates transparency and accountability by requiring the government to assess coordination gaps and recommend improvements, which may lead to faster incident response and better protection of citizens' financial assets.
Named in the bill
Secretary of the Treasury, House Committee on Financial Services, House Permanent Select Committee on Intelligence, Senate Committee on Banking, Housing, and Urban Affairs, Senate Select Committee on Intelligence, Financial institutions (as defined in 31 U.S.C. § 5312(a)), Cybersecurity and ransomware incident response entities
Where it stands
2 cosponsors: 2 Democrats.
- Jan 28, 2025 — Introduced · Congress.gov: “Introduced in House”
- Jan 28, 2025 — Referred to House Committee on Financial Services · Congress.gov: “Referred to the House Committee on Financial Services”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
2 lobbying clients named this bill on 3 disclosure filings across 3 quarters, Dec 2025 to Jun 2026. Those filings disclosed $1,103,165 in lobbying spend. A filing names 127 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 41% of bills with at least one filing.
Zachary (Zach) Nunn, the sponsor, reported $1,895,327 in PAC receipts in the 2026 cycle.
- National Association of Mutual Insurance Companies — $1,005,758 on 2 filings
- American Family Mutual Insurance Company, S.i. — $97,407 on 1 filing
Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (3,927 characters) on Apr 14, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Dec 2025 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 20, 2026 · page rendered 2026-10-20.
“Treasury ordered to study ransomware response gaps at banks” QuorumCivic. https://share.quorumcivic.app/bill/119/hr807 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.