Brussels Bites Back: EU Imposes Sanctions on Chinese and Iranian Firms for Malicious Cyber Attacks

By Editor, March 16, 2026

The European Union has imposed sanctions on two China-based companies and one Iranian entity accused of orchestrating cyber attacks against EU member states and critical infrastructure, marking a significant escalation in the bloc's response to hybrid threats.

The measures, announced after foreign ministers' discussions in Brussels, include asset freezes and travel bans on Integrity Technology Group, Anxun Information Technology from China, and Iran's Emennet Pasargad.

Emennet Pasargad is blamed for hacking a French subscriber database, selling data on the dark web, compromising advertising billboards with disinformation during the 2024 Paris Olympics, and breaching a Swedish SMS service affecting thousands of EU citizens.

The Chinese firms allegedly supplied tools enabling the compromise of over 65,000 devices across six member states between 2022 and 2023, including state-linked operations disrupting services. Two Chinese individuals were also targeted. This brings the EU's cyber sanctions regime to 19 individuals and seven entities.

EU officials stressed the need for unified deterrence, tying into broader security debates. Implications include strained relations with Beijing and Tehran.

China may retaliate, as seen in past trade disputes, while Iran could intensify asymmetric warfare.

The move aligns with U.S. and UK actions against similar actors, fostering transatlantic cooperation. As cyber threats evolve, the EU urges enhanced defenses, including for energy grids vulnerable to disruptions from ongoing conflicts.

This action demonstrates Brussels' commitment to protecting sovereignty in the digital realm, potentially setting precedents for future responses to global cyber aggression.