Foreign Minister Margus Tsahkna stressed that hybrid operations – including cyberattacks – are a central instrument of Russia’s strategic influence operations. To carry out such extensive and coordinated cyber activities, the Russian regime relies, among other actors, on state-backed cyber groups that operate in the interests of Russia’s intelligence services and military structures, carrying out intelligence-gathering and preparatory tasks both in peacetime and in the context of full-scale military conflicts.
“Russia’s imperial ambitions do not end with Ukraine,” Tsahkna said. “The growing scale and aggressiveness of cyberattacks orchestrated by Russia’s Main Directorate of the General Staff of the Armed Forces (GRU) and the Federal Security Service (FSB) reveal a clear pattern of malicious activity aimed at testing the resilience of Western countries, undermining societal stability, weakening support for Ukraine and increasing Russia’s influence in Europe. The cyber sanctions package adopted today – targeting Russian intelligence officers, cybercriminals, GRU-linked hacktivists and companies that have enabled or supported Russia’s strategic objectives – significantly raises the cost of malicious cyber activity and sends a clear message to the aggressor: every attempt to manipulate our societies will have real and tangible consequences.”
The package also addresses attacks against Poland’s energy infrastructure – including wind and solar power plants, a thermal power plant and several industrial facilities – attributed to the 16th Centre of Russia’s Federal Security Service (FSB). “As it becomes increasingly difficult for Russia to sustain its war effort in Ukraine, Russia’s intelligence services have tasked cybercriminals with gathering intelligence in support of Russia’s military and foreign policy objectives. This poses a threat to the security of the whole of Europe,” Tsahkna said.
The minister stressed that international law applies equally to all states in cyberspace and that Russia must be held accountable for all its violations of international law, including its destabilising activities against countries supporting Ukraine. “There are clear rules in cyberspace, and every violation must be met with an appropriate response.”
According to Tsahkna, Estonia will continue working with its EU and NATO Allies, including the United Kingdom, to counter Russia’s cyber activities and implement coordinated countermeasures. “The EU cyber sanctions list now includes 27 individuals and 11 entities. We will identify, attribute and expose everyone responsible for malicious cyber activities or for supporting Russia’s operations. Close cooperation with our Allies enables us to identify attack vectors more rapidly, share technical information and strengthen our collective cyber defence capabilities.”
In addition to the cyber and hybrid sanctions, the European Union also imposed sanctions under its Global Human Rights Sanctions Regime against eight Russian nationals and one entity. Five technology companies and four company executives whose activities have enabled extensive state surveillance and violations of citizens’ rights were also added to the sanctions list. Sanctions were likewise imposed on seven individuals responsible for the torture or execution of Ukrainian prisoners of war and civilians in Russian penal colonies.
