The European Union on 13 July 2026 denounced Russia's malicious cyber activities and imposed restrictive measures on nine individuals and four entities linked to Russia's cyber ecosystem, including state and non-state actors. The statement, issued by High Representative Josep Borrell on behalf of the EU, specifically exposes the 16th Centre of Russia's Federal Security Service (FSB) as controlling cyber threat groups such as TURLA, which have conducted cyber espionage, infiltration of governmental networks, and sabotage of critical infrastructure targeting EU member states including France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania, and Finland, as well as Ukraine and other international partners.
The EU's sanctions target GRU intelligence officers, cybercriminals, self-proclaimed hacktivists, and private companies that contribute to Russia's destabilisation efforts. The EU also welcomed close coordination with the United Kingdom in assessing the growing convergence between non-state and state actors. The bloc reiterated its commitment to strengthening cooperation with international partners, including NATO, in support of a global, free, open, stable, and secure cyberspace. The statement underscores the EU's determination to uphold accountability in cyberspace and calls on all states, including Russia, to adhere to the United Nations framework of responsible state behaviour in cyberspace.
This action marks a significant escalation in the EU's response to Russian cyber threats, imposing concrete costs on those responsible. The sanctions will directly impact the targeted individuals and entities by freezing assets and restricting travel within the EU. For EU member states, the measures signal increased protection against cyber threats, though they may also strain diplomatic relations with Russia. The cybersecurity industry may see increased demand for defensive services, while Russian state-affiliated cyber actors face operational constraints. The EU's coordinated approach with the UK and NATO strengthens collective cyber defence but may also provoke retaliatory cyber activities from Russia.