The European Union on Monday imposed sanctions on Russian military intelligence officers, hackers and private companies, saying they were part of a yearslong cyberespionage campaign to undermine the bloc. Nine people and four entities were targeted. The Brussels apparatus calls it defence. For everyone else, it looks like another round of state power meeting state power while ordinary people are left to live with the fallout.
Brussels and the Cyber Security State
The European Council said in a statement that those targeted “contribute to Russia’s efforts to destabilize the EU, its member states and international partners.” The EU said the espionage and attacks have taken place in at least nine countries. France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania and Finland were named, “among others,” as targets. The language is familiar: institutions speak of stability, then build ever more machinery to police it.
The EU focused its measures on the 16th Center of Russia’s Federal Security Service, or FSB. It said the FSB has been “controlling a variety of cyberthreat groups,” and said it “has conducted a wide range of malicious cyberactivities with growing severity.” That is the official framing. The practical result is a continent where governments answer digital conflict with sanctions, security briefings and more centralised control, while the people whose heating, power and transport systems sit in the middle of it all get to absorb the risk.
French Foreign Minister Jean-Noël Barrot said France intends to summon the Russian ambassador in the coming days. He told French BFM television that the aim of the cyberactivities is “either to capture information, or sabotage the operation, for example, of railway infrastructures as it was the case in Poland.” Railways, heating plants and power plants are not abstractions. They are the systems people rely on to get through winter, get to work and keep cities running. When states turn infrastructure into a battlefield, the public pays first.
Infrastructure as a Target, People as the Buffer
The EU said the campaign has targeted governments and carried out sabotage operations against critical infrastructure like heating and power plants since 2010. That date matters. Sixteen years of accusations, counter-accusations and sanctions have produced a familiar European ritual: officials denounce attacks, then expand the security state that claims it can manage the next one.
Some countries have accused Russia of using cyberattacks and propaganda to interfere with elections. In April, Sweden said Wednesday that a pro-Russian group with links to Russia’s security and intelligence services was behind a cyberattack on a heating plant last year. The announcement followed warnings from officials in Poland, Norway, Denmark and Latvia that Russia is attacking critical infrastructure across Europe. The pattern is clear enough in the official record. Governments point to threats, then present themselves as the only force capable of defending the systems they already control.
The EU did not list the names of the individuals and entities in its statement. That detail fits the rest of the performance. Big claims, selective disclosure, and a public asked to trust institutions that speak in the language of protection while tightening the machinery of surveillance and retaliation.
The Security Script Writes Itself
France intends to summon the Russian ambassador. The European Council issues a statement. Sweden, Poland, Norway, Denmark and Latvia warn of attacks. The cycle keeps moving. What never appears in the official choreography is any serious challenge to the systems that make infrastructure so vulnerable in the first place, or to the political order that treats every crisis as a reason to deepen control from above.
The EU says the sanctions are aimed at destabilisation. The continent keeps getting the same answer from its rulers: more security, more sanctions, more central command. The people living under those systems get the bill, and the risk, while the institutions trade statements and call it resilience.