EU and UK Impose Coordinated Sanctions on Russian Cyberwarfare

The European Union and the United Kingdom launched a coordinated sanctions package on July 13, 2026, targeting Russia's intelligence apparatus for a yearslong cyberespionage campaign. The measures include asset freezes and travel bans for nine EU-designated individuals and entities, and 24 UK-designated targets. This marks the first joint cyber sanctions initiative between the two powers since Brexit.

Central to the sanctions is the 16th Centre of the Federal Security Service (FSB), accused of directing the Turla cyber group to target critical infrastructure. A primary catalyst was a December 2025 attack on 30 Polish power grid substations that could have left 500,000 residents without electricity. Other targets included Polish rail infrastructure and government institutions in France, Germany, Cyprus, the Netherlands, Austria, Slovakia, Romania, and Finland. The UK also sanctioned GRU officials and entities like Rybar LLC for election interference in Moldova and Armenia.

In diplomatic response, Germany summoned the Russian ambassador to the Foreign Ministry, and France announced plans to do the same. Romania condemned the activities as part of a Russian hybrid campaign intended to undermine democratic stability. The Kremlin rejected all allegations as baseless, with spokesperson Dmitry Peskov dismissing the sanctions as illegal and stating that Russia has adapted to previous sanctions.