Reuters reported on March 16 that the European Union imposed sanctions on two Chinese companies, Integrity Technology Group and Sichuan Juxinhe Network Technology, and one Iranian company, Emennet Pasargad, over cyberattacks targeting EU member states. The measures were adopted under the EU cyber sanctions regime and included asset freezes and travel-ban provisions.

The importance of the move is its specificity: Brussels named corporate entities in China and Iran rather than limiting the response to unidentified operators or infrastructure. For wider context, see our Iranian Revolution 2026 conflict briefing and our report on the foiled cyberattack on Poland’s nuclear research centre.

Who was sanctioned and what the move does

Reuters reported that the March 16 measures targeted Integrity Technology Group and Sichuan Juxinhe Network Technology in China and Emennet Pasargad in Iran. Under the EU sanctions framework, listed entities face asset freezes, and EU persons and companies are barred from making funds or economic resources available to them.

The practical effect is not a server takedown but a legal and financial restriction on dealing with the named firms. It also signals that Brussels is willing to attribute hostile cyber activity to commercial entities, not just individual operators. Related Cyberwarzone coverage includes our report on Greek firms scanning networks as the Iran war raises cyberattack risk and our article on CISA warning on Microsoft Intune after the Stryker cyberattack.

About the Author