
The Council of the European Union has imposed sanctions on three Russian military officers for their role in a series of cyberattacks against Estonia in 2020. The individuals, identified as members of the GRU Unit 29155, are accused of orchestrating attacks that compromised sensitive data across Estonian government ministries.
“The cyber-attacks granted attackers unauthorized access to classified information and sensitive data stored within several government ministries, —including Economic Affairs and Communications, Social Affairs, and Foreign Affairs—leading to the theft of thousands of confidential documents,” states the press release. These attacks compromised business secrets, health records, and other critical information, undermining the security of Estonian institutions.
The sanctions include asset freezes, travel bans, and prohibitions on EU persons and entities from making funds available to the listed individuals. This action marks the latest addition to the EU’s cyber sanctions regime, which now targets 17 individuals and 4 entities.
The EU emphasizes its commitment to providing a strong response to malicious cyber activities targeting its member states and partners. This decision underscores the growing international resolve to hold perpetrators of cyberattacks accountable for their actions.