EU and UK Hit Russia With First Joint Cyber Sanctions
Get the Geopolitics newsletter
Daily geopolitics — wars, elections, sanctions, the diplomatic moves that move markets. Free.
- The EU and UK imposed coordinated sanctions on Russia on July 13, 2026 — described as their first joint cyber package — targeting what London called the Russian state's "persistent and increasingly reckless attempts to sow chaos and division across Europe."
- Brussels sanctioned 9 people and 4 entities, while London added 24 names to its blacklist, including officers of Russia's GRU military intelligence agency and alleged "cybercriminals" working with the state.
- The FSB's Centre 16 spying hub was blamed for a recent attempted cyber attack on Poland's power grid that could have cut electricity to 500,000 citizens "in the depths of winter," the British foreign office said, calling it a failed but reckless strike.
- France's Foreign Minister Jean-Noel Barrot said the Russian ambassador would be summoned in coming days, noting that attacks targeted government ministries, companies, and service operators including rail infrastructure.
- The coordinated action comes as Western officials warn Russia has stepped up its "hybrid" campaign to destabilise Europe more than four years into the war on Ukraine.
Why it matters: This marks the first time the EU and UK have aligned their cyber sanctions regimes, elevating the response from rhetoric to coordinated asset freezes and visa bans on FSB and GRU personnel. The Poland grid incident — narrowly avoided, but one that could have blacked out 500,000 people mid-winter — gives the package a concrete, near-miss rationale, while France's decision to summon Moscow's ambassador shows the political costs are spreading across multiple EU capitals.
