The European Union has imposed sanctions on several companies and individuals from China and Iran over their alleged involvement in cyberattacks targeting member states. The measures were adopted by the Council of the European Union, which is responsible for coordinating policy among EU countries. According to the Council, the sanctions target two China-based technology companies, Integrity Technology Group and Anxun Information Technology, as well as the Iranian company Emennet Pasargad.
EU officials said the Chinese firms were linked to operations that enabled unauthorized access to devices across Europe. Integrity Technology Group is alleged to have provided tools used in attacks that affected more than 65,000 devices between 2022 and 2023.
Anxun Information Technology, also known as i Soon, was accused of supplying hacking services used to disrupt critical infrastructure and essential functions in multiple EU member states and other countries. The EU also listed two Chinese nationals, identified as co-founders of the company, for their alleged involvement in the activity.
The Iranian company Emennet Pasargad was sanctioned for its role in cyber operations that included unauthorized access to a database belonging to a French service provider. According to the Council, the company also promoted the stolen data on dark web platforms and was linked to an incident involving compromised digital billboards during the 2024 Paris Olympic Games.
Sanctions imposed by the EU typically include asset freezes and restrictions on access to financial resources within the bloc. In some cases, travel bans may also apply to individuals listed under the measures.
The decision follows ongoing concerns within the EU about cyber operations targeting public institutions, infrastructure, and private sector systems. Recent reporting indicates that the sanctions are part of broader efforts by the bloc to respond to foreign cyber activity affecting European networks and services.
China’s foreign ministry said it opposes the sanctions and called on the EU to reconsider its approach.
The EU has not disclosed additional technical details about the incidents referenced in the sanctions. Authorities said the measures are intended to address activities that involve unauthorized access to systems and disruption of services within member states.