Question to the Department for Business, Innovation, Science and Trade:

To ask the Secretary of State for Business, Innovation, Science and Trade, whether he has made an estimate of the cost to (i) Royal Mail and (ii) UK business of the LockBit ransomware attack on Royal Mail in 2023.

We do not routinely comment on costs of individual cyber attacks. Royal Mail's parent company, International Distributions Services (IDS), has publicly reported spending £10 million on remediation and systems resilience improvements following the incident affecting Royal Mail in 2023.

We know that cyber attacks can have serious consequences for businesses, with independent research finding that the average cost of a significant cyber incident is almost £195,000. The Government works closely with industry and relevant authorities to support resilience against cyber threats and to ensure risks are appropriately managed.