Russian Cyberattacks: EU, NATO and UK Sanction Hackers, Moscow Denies Charges

Herz — World Desk · 14 July 2026 at 01:05 · 30s summary · 3 min read

What we know

The European Union, NATO (North Atlantic Treaty Organization) and the United Kingdom announced sanctions against Russian hackers on 14 July 2026, according to La Repubblica. This coordinated decision followed cyberattacks attributed to Russia.

At the same time, twelve allied intelligence services — including Italian intelligence — released public cybersecurity guidance to help citizens and organisations protect themselves against these attacks.

The Kremlin rejected the accusations, stating: "You have no proof."

You have no proof.

— Kremlin, responding to Western accusations of cyberattacks, 14 July 2026

Context

European sanctions rest on the Cyber Diplomacy Toolbox, a legal framework adopted by the EU Council in June 2017. This mechanism allows the imposition of restrictive measures — asset freezes and travel bans — against those responsible for malicious cyberattacks targeting EU member states or third countries.

The framework was applied for the first time in July 2020: the EU then sanctioned individuals linked to Russian groups Sandworm and APT28 — APTs (Advanced Persistent Threats, a designation for groups of attackers often state-sponsored, conducting sophisticated and targeted intrusions) connected to the GRU, Russia's military intelligence — as well as Chinese and North Korean actors, for attacks including NotPetya, WannaCry and the Bundestag breach (German Parliament).

Since Russia's invasion of Ukraine in February 2022, NATO has integrated cyber defence into its collective defence doctrine and strengthened coordination among allies against Russian offensive operations targeting Western critical infrastructure.

Timeline

1. 01.01 01:00
   The NotPetya attack, attributed to Russian group Sandworm (GRU), strikes global companies. In June, the EU Council adopts the Cyber Diplomacy Toolbox.
2. 01.07 02:00
   First application of the Cyber Diplomacy Toolbox: the EU sanctions individuals linked to Russian groups Sandworm and APT28, as well as Chinese and North Korean actors, for the NotPetya, WannaCry and Bundestag breach attacks.