The European Union on 14 July 2026 issued a statement denouncing Russia's malicious cyber ecosystem and imposing restrictive measures on nine individuals and four entities linked to cyber activities targeting the EU, its member states, and international partners. The statement, issued by the High Representative on behalf of the EU, specifically exposes the 16th Centre of Russia's Federal Security Service (FSB) as controlling cyber threat groups including TURLA, which have conducted cyber espionage, infiltration of governmental networks, and sabotage of critical infrastructure across several EU member states, including France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania, and Finland. The sanctions target GRU intelligence officers, cybercriminals, hacktivists, and private companies contributing to Russia's destabilisation efforts.
The EU's action comes in response to a growing convergence between state and non-state actors in Russia's cyber operations, which have caused disruptions and financial losses. The statement highlights specific incidents: in France, the 16th Centre has conducted cyber espionage against strategic governmental entities since 2010 and targeted the defence industry in 2025; in Germany, it targeted governmental entities; and in Poland, it carried out disruptive sabotage operations against critical infrastructure, including combined heating and power plants. The EU welcomed close coordination with the United Kingdom in assessing this convergence and pledged to strengthen cooperation with international partners, including NATO, to uphold a global, free, open, stable, and secure cyberspace.
The statement underscores the EU's determination to impose costs on those responsible for malicious cyber activities and calls on all states, including Russia, to adhere to the United Nations framework of responsible state behaviour in cyberspace. This marks a significant escalation in the EU's response to Russian cyber threats, combining diplomatic condemnation with targeted sanctions against both state and non-state actors.