EU and UK Launch Coordinated Sanctions on Russian Cyber Units

The European Union and the United Kingdom announced a coordinated package of sanctions against Russian entities and individuals on July 13, 2026. These measures target those responsible for extensive cyberattacks, human rights abuses, and hybrid operations directed at European states and international partners. This marks the first collaborative cyber-focused sanction package between the two powers.

The EU measures include the 16th Center of Russia's Federal Security Service (FSB) and various surveillance technology firms like Citadel and Norsi-Trans. These entities allegedly managed cyber threat groups and developed spyware used to monitor journalists and opposition figures across Europe. The UK simultaneously sanctioned 24 individuals, including GRU leadership and media figures from Rybar LLC, for spreading disinformation and recruiting hackers through front companies like IMPULS.

This escalatory move follows a thwarted attempt by Russia’s FSB to disrupt Poland’s energy grid in December 2025. By targeting the ecosystem of state-sponsored hackers and disinformation agents, both the EU and UK aim to establish a stronger deterrence posture. The move carries significant geopolitical weight as it further isolates Russian intelligence operations while attempting to secure vital European infrastructure from ongoing digital hybrid warfare.