Public and Private Sector Ransomware Response Coordination Act of 2025

This bill mandates the Secretary of the Treasury to produce a comprehensive report within one year of its enactment. The report will analyze the current state of coordination and collaboration between public and private sectors, including governmental agencies, in preventing and responding to ransomware attacks targeting financial institutions. Key areas of examination include whether relevant governmental agencies have timely access to information reported by financial institutions following an attack and the utility of such information for prevention, investigation, and prosecution. The report will also assess existing reporting requirements, identify reasons why financial institutions might withhold or delay reporting, and incorporate feedback from cybersecurity and ransomware incident response entities. Ultimately, the Secretary must recommend policy initiatives to strengthen public-private partnerships, improve incident report sharing, and reduce incident response times. The report will be submitted in an unclassified form, potentially with a classified annex, and followed by a briefing to appropriate congressional committees within 15 months.