TITLE: European Union Imposes Sanctions on Russian Cyber Actors Targeting Member States
BODY:
On July 13, 2026, the European Union (EU) issued a statement through its High Representative denouncing Russia's malicious cyber ecosystem and imposing restrictive measures against individuals and entities responsible for cyber attacks targeting the EU, its member states, and international partners.
The EU exposed the 16th Centre of Russia's Federal Security Service (FSB) as controlling multiple cyber threat groups, including TURLA. The FSB has conducted extensive malicious cyber activities affecting EU member states and Ukraine for years, including infiltration of governmental networks and sabotage of critical infrastructure. France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania, and Finland have been targeted. Specific incidents include cyber espionage against French strategic governmental entities and defence industry since 2010 and 2025 respectively; targeting of German governmental entities; and disruptive sabotage operations against Polish critical infrastructure, including combined heating and power plants.
The EU statement also identified cybercriminals, self-proclaimed hacktivists, and private companies linked to Russia as conducting, enabling, and facilitating malicious activities under Russian instruction, direction, or control. These actors have targeted public services and critical infrastructure, causing disruptions and financial losses across member states.
In response, the EU imposed restrictive measures on nine individuals and four entities, including GRU intelligence officers, cybercriminals, self-proclaimed hacktivists, and private companies contributing to Russia's destabilisation efforts. The EU emphasised coordination with the United Kingdom on assessing the convergence between non-state and state actors, and committed to strengthening cooperation with international partners including NATO. The statement reaffirmed that all states, including Russia, should adhere to United Nations frameworks on responsible state behaviour in cyberspace and respect international law.