Council Decision (CFSP) 2023/964 concerning „restrictive measures against cyber-attacks threatening the Union or its Member States“ was published in the Official Journal (OJ) of the EU. This decision modifies Council Decision (CFSP) 2019/797 in that it extends the application date of the asset freezing measures and trespassing restrictions set out in Article 4 and Article 5 of the 2019 decision by one year, up to May 18, 2024. The general validity of the decision remains unchanged (May 18, 2025).
Council Decision (CFSP) 2019/797 sets out the framework for European sanction measures which will be imposed following malicious cyber attacks within the EU. It also includes a list of sanctioned persons and entities whose assets are frozen based upon a violation determination. The list is updated as needed.
