H.R. 807 — Public and Private Sector Ransomware Response Coordination Act of 2025

This section directs the Secretary of the Treasury to submit to the House Committee on Financial Services, House Permanent Select Committee on Intelligence, Senate Committee on Banking, Housing, and Urban Affairs, and Senate Select Committee on Intelligence, not later than one year after enactment, an unclassified report (with possible classified annex) assessing (1) public-private coordination, including with cybersecurity and ransomware incident response entities serving financial institutions (i.e., entities supporting ransomware investigations, risk management, cybersecurity technology, regulatory compliance, and recovery in the financial sector), in responding to and preventing ransomware attacks on financial institutions (as defined in 31 U.S.C. 5312(a)); (2) interagency coordination; (3) governmental access to and utility of reported information for prevention, investigation, and prosecution; (4) adequacy of reporting requirements; (5) need for further legislation; (6) recommended initiatives to strengthen partnerships, information sharing, and response times; (7) reasons for delayed reporting by financial institutions; and (8) feedback from cybersecurity providers. The section further requires the Secretary to brief the committees on the report not later than 15 months after enactment.