European Council extends cyberattack sanctions regime

European Council extends cyberattack sanctions regime

As cyberattacks continue to pose a troubling threat, the EU has once again prolonged its sanctions regime to tackle the problem.

EU extends cyber-attack sanctions until 2026: details of the decisionThe Council of the EU has extended cyber-attack sanctions, which allow for restrictions against the individuals and institutions involved, until 18 May 2026, and the legal regime until 2028. The sanctions are currently in force against 17 individuals and 4 institutions.

The European Union can impose restrictive measures on individuals or organisations involved in cyberattacks until mid-May 2028, member states decided on Monday. The extension of the legal framework for three years allows sanctions to be imposed on individuals or organisations involved in cyberattacks that pose a threat to the EU or its member states.

The European Council “has decided today to extend for another year, until 18 May 2026, the restrictive measures against cyber attacks threatening the EU and its Member States” and “the legal framework for these measures is extended for three years, until 18 May 2028”. This is stated in a press release from the EU Council.