← Back to House of Commons Debates
Cyber-attack: Microsoft
20 July 2021
Lead MP
James Cleverly
Debate Type
Ministerial Statement
Tags
EconomyForeign Affairs
Other Contributors: 29
At a Glance
James Cleverly raised concerns about cyber-attack: microsoft in the House of Commons. A government minister responded. Other MPs also contributed.
How the Debate Unfolded
MPs spoke in turn to share their views and ask questions. Here's what each person said:
Government Statement
Yesterday, the UK Government attributed a major cyber-attack on Microsoft Exchange servers to Chinese state-backed groups. This attack, which was intended for espionage and data theft, affected global networks, including those in the UK. The Foreign Secretary announced that the Chinese Ministry of State Security (MSS) is responsible for activities known as APT40 and APT31. At the end of March, 92% of customers had installed updates to protect against these vulnerabilities. Thirty-nine countries, including the EU, NATO, US, Australia, New Zealand, Norway, and Japan, have formally attributed responsibility to China. The UK is calling for China to adhere to commitments made in 2015 regarding cyber-attacks.
Chingford and Woodford Green
Question
The shadow minister questioned why the Government did not make a statement yesterday when they could have. He asked about allowing Chinese firms to buy critical British technology companies despite known aggressive cyber activities by China, and inquired why no criminal charges were brought against operatives here as was done in the US. Additionally, he called on the Government to consider boycotting the Beijing Winter Olympics due to ongoing threats from China.
Minister reply
The minister explained that the UK will continue to work collaboratively with international partners in response to these cyber-attacks and emphasised the importance of the 39 countries' united voice. He also mentioned a review into Chinese investment, such as Newport Wafer Fab, but did not disclose further measures due to potential effectiveness concerns. Regarding the Olympics, he stated that the British Olympic authorities will make decisions on attendance.
Lisa Nandy
Lab
Wigan
Question
This is an unacceptable attack, costing businesses millions and raising the alarm for people across the country. The Government confirmed yesterday that a quarter of a million servers were affected worldwide, but how many British businesses and organisations were victims of the attack and how many may still be vulnerable? What is the cost to British businesses of compromised data and were public bodies among those targeted?
Minister reply
In response to the specific questions that the hon. Lady raised, we estimate—we can only estimate—that 3,000 UK-based organisations were put at risk by this attack. It was an untargeted action. It was not targeted at specific sectors. We do not believe that Government organisations were a victim of it, and because it was an untargeted action it is not possible for me to give a credible assessment of the economic damage of this particular attack.
Lisa Nandy
Lab
Wigan
Question
The Computer Misuse Act 1990 is now three decades old. It was written before smartphones, before Google—before the public could even use the web. When will the Government finally update it?
Minister reply
I understand the point that my right hon. Friend makes about the use of language. I am not in a position to have a debate on that specific point, but I make the broader point that the UK Government’s actions, and indeed the actions of our friends and allies around the world, are based on actions whether they be from Russia, China or wherever else, rather than on the narrow definition that may be found in international documents.
Julian Lewis
Con
New Forest East
Question
As the ISC’s inquiry into China is still current, I shall limit myself to asking why the Government generally describe the communist Chinese system as authoritarian rather than totalitarian, what the Minister’s understanding is of the difference between the two, and whether the Chinese regime took any steps to close down the hacking group APT10
Minister reply
I understand the point that my right hon. Friend makes about the use of language. I am not in a position to have a debate on that specific point, but I make the broader point that the UK Government’s actions, and indeed the actions of our friends and allies around the world, are based on actions whether they be from Russia, China or wherever else, rather than on the narrow definition that may be found in international documents.
Question
I warmly congratulate the right hon. Member for Chingford and Woodford Green (Sir Iain Duncan Smith) on raising this vital issue, and echo his concern about the fact that this was an urgent question rather than a statement made proactively by a representative of the Government. I would like to hear what they are, because a somewhat homeopathic approach to date does not seem to have had much of an impact on stopping anything.
Minister reply
Countries around the world trade with and receive investments from China, and, as I have said, pretending that that does not exist or that it is not a significant economic player in the world is completely unrealistic. What we are seeking to do is change China’s behaviour, and we are doing it collaboratively with our international partners.
Nusrat Ghani
Con
Sussex Weald
Question
If you will allow me, Mr Speaker, I should like to wish you, and especially the people on the estate who are celebrating it, a very happy Eid Mubarak. I am not going to ask the Minister to explain China’s actions, but I want him to try to explain why we do not align ourselves with our allies—particularly the United States—who have moved much further on this issue, notably in protecting individuals who have been sanctioned or targeted by China.
Minister reply
I completely understand my hon. Friend’s concerns, but I assure her that we work incredibly closely with international partners, including the United States of America. The unprecedented number of countries and multilateral organisations that co-authored yesterday’s statement is testimony to how closely we are working on this issue as an international community.
Layla Moran
Lib Dem
Oxford West and Abingdon
Question
It is absolutely right that we are working in lockstep with our international allies to combat these attacks on our cyber-security. However, the Minister will be aware of hugely concerning reports that activists, civil society leaders, Government officials and politicians around the world have been targeted by NSO Group’s Pegasus software.
Minister reply
The House will understand that I will not discuss security and intelligence operations at the Dispatch Box, and that I therefore will not be responding to that part of the hon. Lady’s question. We do of course know about the capabilities of the Pegasus software; its licensing is ultimately a decision for the Israeli Government, but we are working closely with our friends and allies around the world in response to any emerging technical threat at this time.
Question
Cyber capabilities are the new arms race, but skills are in short supply. How can we best work with our allies to build the skilled workforce we need to defend ourselves in cyber-space?
Minister reply
My hon. Friend is absolutely right that skills are an important part of our arsenal to defend ourselves. The Government are working with industry, academics and many other partners to ensure that we develop the essential cyber-skills we need to be a credible force in the modern world.
Barry Sheerman
Lab
Harrow West
Question
Questioned the Minister's inaction on China, referring to John F. Kennedy’s book “Why England Slept” and criticising the UK Government for allowing Chinese influence and intellectual property theft without a strong response.
Minister reply
Responded that the Foreign Secretary had addressed the issue earlier, highlighting that while they are aware of the challenges posed by China, their approach involves realistic engagement and international collaboration to drive improvements in China’s behaviour.
Tim Loughton
Con
East Worthing and Shoreham
Question
Challenged the Minister for lack of concrete consequences against China despite industrial-scale human rights abuses and cyber-attacks, asking about prosecutions or sanctions. Asked when a decision on UK participation in the Olympics would be made.
Minister reply
Acknowledged that the sanctions imposed on Xinjiang human rights abusers are not 'homeopathic', and mentioned visa grants to British national Hong Kong Chinese as evidence of actions being taken.
Chi Onwurah
Lab
Newcastle upon Tyne Central
Question
Asked the Minister about the likelihood of opposition to China leading to cyber-attacks, and asked what measures are in place to protect those opposing the Chinese state.
Minister reply
Stated that the UK will continue to work with international partners to make it clear to China that its behaviour must align with global norms and standards.
Neil O'Brien
Con
Harborough, Oadby and Wigston
Question
Asked about the themes of international cooperation in addressing escalating aggressive cyber-espionage from China.
Minister reply
Emphasised the importance of international collaboration to legitimize further actions against China by clearly attributing responsibility for state-backed attacks.
Chris Bryant
Lab
Rhondda
Question
Expressed frustration with lack of urgency and determination in addressing cyber-attacks from China, calling for more decisive action.
Minister reply
Asserted that the UK has taken actions such as imposing sanctions and offering support to Hong Kong residents. Highlighted the importance of international unity on these issues.
Jacob Young
LD
Richmond Park
Question
Asked about cross-Government efforts to build resilience against foreign cyber-attacks, particularly those state-backed.
Minister reply
Assured that Government is working across departments and has invested in programmes through GCHQ and the National Cyber Security Centre to enhance cyber-defences.
Margaret Ferrier
Ind
Rutherglen and Hamilton West
Question
Asked about steps being taken by the UK Government to upgrade NHS computer systems to prevent vulnerabilities from cyber-attacks.
Minister reply
Responded that a patch was released in response to an attack, with 92% of organisations installing it. Advised on taking necessary steps for future security.
Patricia Gibson
SNP
North Ayrshire and Arran
Question
Critiqued the Minister’s approach as ineffective against a brutal regime, seeking stronger action than mere 'telling off'.
Minister reply
Noted that 39 countries had attributed responsibility to Chinese state-backed cyber-criminals in a joint statement, setting a precedent for further actions.
Jim Shannon
DUP
Strangford
Question
China's disregard for international norms and its cyber-attacks on Microsoft servers have undermined global security. What discussions has the Minister had with NATO, and what further steps will be taken to expose these attacks?
Minister reply
The UK worked closely with NATO in response to the cyber-attacks, issuing a joint statement that highlights China's actions and sets a foundation for future actions by international partners.
Luke Evans
Con
Hinckley and Bosworth
Question
Was the issue of China's influence discussed at the G7 summit? Is the UK leading in mitigating threats from China, and what protections are being offered to businesses and citizens?
Minister reply
The UK is taking a leadership role on cyber-security issues, working closely with international partners. Practical steps for protection against cyber-attacks are advised by the National Cyber Security Centre.
Question
What involvement does the UK have with Project Pegasus from the NSO Group and what measures are being taken to monitor undetectable phone apps providing full access?
Minister reply
The licensing of this software is managed by the Israeli Government. The UK regularly discusses cyber-security issues with global partners, aiming for responsible use of cyber-technologies.
Question
Does the Minister agree that countries should be wary of engaging closely with China due to its lack of support for innovation and disregard for international norms?
Minister reply
The UK advocates for human rights, protection of intellectual property, and responsible behaviour on the part of China. The goal is to influence China's actions positively.
Ruth Jones
Lab
Newport West and Islwyn
Question
Does the situation with Newport Wafer Fab indicate that Government security policies are failing in protecting intellectual property?
Minister reply
The UK values jobs and overseas investment, but also takes security implications seriously. The government is reviewing the situation at Newport Wafer Fab.
Question
Why was an urgent question needed instead of a statement from the Foreign Secretary following departmental questions?
Minister reply
The Minister did not have prior knowledge about the decision to use an urgent question, but is willing to answer important issues without hesitation.
Tan Dhesi
Lab
Slough
Question
After recent incidents, when will the Government provide a consistent approach towards China, considering its global impact?
Minister reply
The UK aims for China to be a responsible player on the world stage. The attribution statement by 39 countries is an important step towards influencing China's behaviour.
Question
Does COP26 influence the Government’s approach towards China, and what strategy does the UK have to persuade China to set tough carbon reduction targets?
Minister reply
The UK is focused on influencing China's cyber-behaviour but also recognises its role in global issues like climate change. The goal is for China to improve its environmental practices.
Question
While attribution is important, should there be an audit of Confucius institutes and a push towards a digital Geneva convention?
Minister reply
International norms need updating as cyber-space evolves. The UK is working with partners to address these issues, highlighting China's contradictory actions.
Sammy Wilson
DUP
East Antrim
Question
China’s military and Government have been targeting key industries in the west, including the defence industry, Government and intellectual property. This has been known for so long now, yet what have the Government done so far? They have protested, and handed dossiers of evidence on what the Chinese authorities are up to, but it seems that China is almost no longer scared of being caught because the sanctions are so weak. If we can impose sanctions on Russia for cyber-attacks, why can we not impose hard and hurting sanctions on China?
Minister reply
I completely understand the right hon. Gentleman’s point. He will understand that we never speculate on the future use of sanctions because to do so could be counterproductive to the effect that we are trying to have on China. As I say, this is an important foundation stone statement. It sets a very clear line in the sand from the UK, the US, Japan, NATO, the EU and others that we recognise what is happening here, that China can no longer plead ignorance, that we demand that it takes action against organisations and individuals conducting these cyber actions and that it severs any links that it might have with such organisations.
Andrew Murrison
Con
South West Wiltshire
Question
Colleagues across the House have spoken about appeasement. The truth is that the Ministry of State Security will curb its maligned perversion of the digital Silk Road only if the west shows its willingness to respond in kind. Among the 39 signatories that the Minister has cited today, what appetite does he discern for a willingness to develop doctrine around the use of cyber interdiction for use in a measured and proportionate way against those who threaten and attack us?
Minister reply
I thank my right hon. Friend and predecessor for the point that he has made. I hope he will understand that I will not speculate at the Dispatch Box about the nature and scope of our cyber capabilities, save to say that we are a global leader, particularly in cyber-defence, although of course that is not the only thing that he mentioned. With regard to our international partners, this is something that we do discuss. In the recent G7 Foreign and Development Ministers’ communiqué, the G7 expressed serious concern about human rights violations in Xinjiang and reiterated the call for independent experts to be given unfettered access to Xinjiang. The international community is aware of, thinking about, talking about and taking action on some of the activities of the Chinese state that we find unacceptable.
Diana R. Johnson
Lab
Kingston upon Hull North and Cottingham
Question
This hack shows that the need for a comprehensive approach to cyber-security is probably greater than ever before. In the light of this latest attack, will the Minister now give a date for the publication of the Government’s new cyber-security strategy?
Minister reply
The right hon. Lady is absolutely right that a comprehensive approach to cyber-security is incredibly important. As I say, the UK is proud of the fact that we are a global leader in cyber-security. The publication of the document she mentions, and others, will come in due course. I am not able to give her a precise date at the Dispatch Box at the moment.
Shadow Comment
Iain Duncan Smith
Shadow Comment
The shadow minister criticised the Government for not making a statement yesterday when they could have. He questioned why the UK is allowing Chinese firms to buy critical British technology companies despite known aggressive cyber activities by China, and asked why no criminal charges were brought against operatives here as was done in the US. Duncan Smith also called on the Government to consider boycotting the Beijing Winter Olympics due to ongoing threats from China.
▸
Assessment & feedback
Summary accuracy
About House of Commons Debates
House of Commons debates take place in the main chamber of the House of Commons. These debates cover a wide range of topics including government policy, legislation, and current affairs. MPs from all parties can participate, question ministers, and hold the government accountable for its decisions.