I welcome the Bill because the consolidated and updated powers can be used to tackle a wide range of threats, both new and old. However, my remarks will focus on a new, growing and specific threat: economic cybercrime carried out over the internet.
The internet is an enormous economic and commercial opportunity for our country, but it has also become a means of carrying out economic attack and espionage and of causing harm. That is why the National Security Council was right to categorise cyber-attacks as a tier 1 threat to national security, and why the Chancellor was right to say in his speech to GCHQ last year that the starting point for the House must be that every British company and every British computer network is at risk.
Cybercrime is not simply something that happens to other countries at other times; from the City of London to the towns, cities and villages represented in this House, the threat is real and growing, and the Bill provides this country with the vital tools it needs to protect our economy from that growing threat.
The Centre for Economics and Business Research estimates that cybercrime costs the British economy £34 billion per year, including £18 billion from lost revenue. Cybercrime includes a broad range of offences, from phishing for personal and financial information; to industrial espionage, where businesses’ intellectual property is stolen; to the disruption of this country’s critical national infrastructure, such as our banks and defence facilities.
The threats come from a wide range of actors: hostile nation states, cross-border crime syndicates, company insiders and so-called hacktivists. Those threats are growing and very real, and the Bill therefore gives the police and our security services the vital tools they need to fight back in the digital age, from intercepting data to interfering with computer equipment.
I want to give the House just one example of a recent cyber-attack to show the scale these attacks can reach. Last year, Carphone Warehouse was the victim of one of Britain’s biggest ever attacks on a business. The personal details of up to 2.4 million customers, including bank details and dates of birth, were accessed by hackers. Some 90,000 customers had their credit card details accessed. The powers in the Bill will help to prevent and detect similar episodes in the future, keeping our economy secure.
At the heart of the fight against modern economic cybercrime is the asymmetry between attack and defence. It is simply much easier and cheaper to attack a business network than to defend it, and that asymmetry is growing. A few years ago, mounting a cyber-attack meant having all the skills at every stage of the attack, but in the last few years it has become possible for all the elements of the attack to be deployed more easily. The barriers to entry for attackers are coming down, and the workload of the defenders is going up. We need to give our police and security services the tools they need to fight back in the digital age and to keep our economy secure and strong. That is what the Bill does, and that is why it deserves the support of the whole House.
6.27 pm