
EU Council prolongs cyberattack sanctions until May 2026
The EU Council has extended the sanctions regime for cyberattacks until May 18, 2026, and also extended the legal regime for applying such restrictions for three years, until May 18, 2028
This is stated on the website of the European Council.
The relevant framework allows the EU to impose targeted restrictive measures against individuals or legal entities involved in cyberattacks that cause significant impact and pose an external threat to the EU or its member states.
Restrictive measures can also be imposed in response to cyberattacks against third countries or international organizations if such measures are deemed necessary to achieve the objectives of the Common Foreign and Security Policy.
In this way, the EU seeks to deter cyber activities and support the international rules-based order, ensuring that those responsible are held accountable.
Currently, the EU applies such restrictive measures against 17 individuals and 4 institutions, which includes freezing assets and prohibiting them from providing financial resources, directly or indirectly. In addition, individuals included in the sanctions list are prohibited from traveling to the EU. The list of such persons is reviewed every 12 months.
- The pro-Russian hacker group NoName057(16) claimed responsibility for a cyberattack on the official websites of Romanian state institutions on the day of the first round of presidential elections on May 4.
- News





