Ransomware Task Force (RTF)

Combating the ransomware threat with a cross-sector approach

The Ransomware Task Force (RTF) is a multistakeholder effort with participation from across government, industry, and civil society. Together, the RTF aims to identify and advance recommendations to reduce the risk of ransomware. Days before the Colonial Pipeline attack in May 2021, the RTF published a cornerstone report offering 48 recommendations primarily directed at governments and industry to better combat ransomware.

Since the report’s release, the U.S. government and its partners have intensified disruption efforts, increased information sharing, and developed more comprehensive ransomware mitigation and recovery strategies. However, as of April 2025, our assessment is that 24 of our 48 recommendations have yet to see substantial progress. IST’s view is that the 48 original recommendations remain relevant and important to implement. These remaining 24 recommendations are more difficult to implement; in the United States, many would require legislative action.

The work of the Ransomware Task Force continues to accelerate, with several discrete lines of effort continuing to build upon the findings of the RTF Report, synthesize the lessons learned and shared among our members and supporters, and adapt to the evolving ransomware threat itself. For 2025, the RTF continues work in the following areas:

  • International Engagement Working Group
  • Brazil Ransomware Task Force
  • Strategic Disruption
  • Victim Notification
  • State, Local, Tribal, and Territorial (SLTT) Cybersecurity Initiative
  • Cyber Insurance and Resilience

"Tackling ransomware will not be easy; there is no silver bullet for solving this challenge. Most ransomware criminals are based in nation-states that are unwilling or unable to prosecute this cybercrime, and because ransoms are paid through cryptocurrency, they are difficult to trace. This global challenge demands an “all hands on deck” approach, with support from the highest levels of government."

Blueprint for Ransomware Defense

An action plan for ransomware mitigation, response, and recovery for small- and medium-sized enterprises, available in English, Spanish, French, and Portuguese.

Combating Ransomware: A Comprehensive Framework for Action

A comprehensive framework that breaks down siloed approaches and advocates for a unified, aggressive, comprehensive, public-private anti-ransomware campaign.

Featured Content

Recent Content

Ransomware Task Force Steering Committee

The Ransomware Task Force (RTF) Steering Committee consists of senior stakeholders and experts that approach the RTF from an objective, ecosystem-wide perspective to help drive outcomes and ensure the effectiveness of ongoing work. The Steering Committee provides high-level support, guidance, and oversight of RTF progress and ensures that lines of effort are impactful, efficient, and in line with existing work. 

Omesh Agam

Chainalysis

Heather Adkins

Google

Raj De

Mayer Brown

Kristopher Fador

Bank of America

Sandra Joyce

Google Cloud

Michael Lashlee

Mastercard

Wendy Nather

1Password

Ciaran Martin

University of Oxford

Steven Masada

Microsoft

Jai Ramaswamy

Andreessen Horowitz

Fernando Ruiz Pérez

Banco Santander

Ransomware Task Force Co-Chairs

Original RTF Members and Line of Effort Participants

a16z
Amazon Web Services
Aspen Digital
Aviation ISAC
Banco Santander
Bank of America
Blackbaud
BlueVoyant
Center for Internet Security
CFC Underwriting
Chainalysis
CipherTrace
Cisco
Citrix
Coveware
CrowdStrike
CyberPeace Foundation
The CyberPeace Institute
Cybereason
Cyber Threat Alliance
Cybera
CyberArk
Cybersecurity Coalition
Datto
Deloitte
Ernst & Young
FireEye

Jefferson County, CO
K12 SIX
McAfee
Microsoft
National Governors Association
New York Department of Financial Services (NYDFS)
Palo Alto Networks
Rapid7
Recorded Future
Red Canary
Redacted
Resilience
Royal Canadian Mounted Police’s National Cybercrime Coordination Unit (NC3)
SecurityScorecard
The Shadowserver Foundation
Stratigos Security
Team Cymru
Third Way
University of Oxford Blavatnik School of Government
U.K. National Cyber Security Centre (NCSC)
U.K. National Crime Agency (NCA)
U.S. Cybersecurity and Infrastructure Security Agency (CISA)
U.S. Federal Bureau of Investigation (FBI)
U.S. Secret Service (USSS)
U.T. Austin Strauss Center

Search all Ransomware Task Force content