Introduction
1. Council Regulation (EU) 2019/796 (the “Regulation”) concerning restrictive measures against cyber-attacks threatening the European Union or its Member States has been amended.
2. An asset freeze now applies to the persons listed in the Annex to this Notice under Part 3 of the Sanctions and Asset-Freezing (Jersey) Law 2020 (“SAFL”).
Notice summary (Full details are provided in the Annex to this Notice)
3. The following entries have been added and are subject to an asset freeze:
Individuals
- BADIN, Dmitry Sergeyevich
- KOSTYUKOV, Igor Olegovich
Entity
- 85TH Main Centre for Special Services (GTsSS) of The Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU)
What you must do
4. You must:
- check whether you maintain any accounts or hold any funds or economic resources for the persons set out in the Annex to this Notice.
- freeze such accounts, and other funds or economic resources.
- refrain from dealing with the funds or assets or making them available (directly or indirectly) to such persons unless licensed by the Minister for External Relations (“MER”).
- report any findings to MER, together with any additional information that would facilitate compliance with the Regulation.
- provide any information concerning the frozen assets of designated persons that MER may request. Information reported to MER may be passed on to other regulatory authorities or law enforcement.
5. Failure to comply with financial sanctions legislation or to seek to circumvent its provisions is a criminal offence.
Legislative details
6. The Regulation is implemented in Jersey under the Sanctions and Asset-Freezing (Implementation of EU Regulations) (Jersey) Order 2020 (the “EU Regulations Order”), which was made under Articles 3 and 4 of SAFL.
7. On 22 October 2020 Council Implementing Regulation 2020/1536 (the “Amending Regulation”) was published in the Official Journal of the European Union by the Council of the European Union.
8. The Amending Regulation amended Annex I to the Regulation with effect from 22 October 2020. Any changes to the Annex are effective immediately in Jersey by virtue of the ambulatory provisions of the EU Regulations Order.
Further information
9. A copy of the Regulation and the Amending Regulation can be obtained from the website of the Official Journal of the European Union.
10. The EU Regulations Order and SAFL can be found on the Jersey Legal Information Board website.
11. Copies of recent Notices, certain EU Regulations, and Jersey legislation can be found on the Cyber-attacks financial sanctions page on the Jersey Financial Services Commission website.
12. For more information on Financial Sanctions please see the Jersey Financial Services Commission guidance on financial sanctions.
Enquiries
13. Non-media enquiries, reports and licence applications should be addressed to:
Head of International Compliance
External Relations
Office of the Chief Executive
sanctions@gov.je
ANNEX TO NOTICE
FINANCIAL SANCTIONS: CYBER-ATTACKS
COUNCIL IMPLEMENTING REGULATION (EU) 2020/1536
AMENDING ANNEX I TO COUNCIL REGULATION (EU) 2019/796
ADDITIONS
Individuals
1. BADIN, Dmitry Sergeyevich
DOB: 15/11/1990 POB: Kursk, Russian SFSR (now Russian Federation) Nationality: Russian. Gender: male. Other information: Dmitry Badin took part in a cyber-attack with a significant effect against the German federal parliament (Deutscher Bundestag). As a military intelligence officer of the 85th Main Centre for Special Services (GTsSS) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), Dmitry Badin was part of a team of Russian military intelligence officers which conducted a cyber-attack against the German federal parliament (Deutscher Bundestag) in April and May 2015. This cyber-attack targeted the parliament’s information system and affected its operation for several days. A significant amount of data was stolen and the email accounts of several MPs as well as of Chancellor Angela Merkel were affected.
2. KOSTYUKOV, Igor Olegovich
DOB: 21/02/1961 Nationality: Russian. Gender: male. Other information: Igor Kostyukov is the current Head of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), where he previously served as First Deputy Head. One of the units under his command is the 85th Main Centre for Special Services (GTsSS), also known as “military unit 26165” (industry nicknames: “APT28”, “Fancy Bear”, “Sofacy Group”, “Pawn Storm” and “Strontium”). In this capacity, Igor Kostyukov is responsible for cyber-attacks carried out by the GTsSS, including those with a significant effect constituting an external threat to the Union or its Member States. In particular, military intelligence officers of the GTsSS took part in the cyber-attack against the German federal parliament (Deutscher Bundestag) which took place in April and May 2015 and the attempted cyber-attack aimed at hacking into the Wi-Fi network of the Organisation for the Prohibition of Chemical Weapons (OPCW) in the Netherlands in April 2018. The cyber-attack against the German federal parliament targeted the parliament’s information system and affected its operation for several days. A significant amount of data was stolen and email accounts of several MPs as well as of Chancellor Angela Merkel were affected.
Entity
1. 85th Main Centre for Special Services (GTsSS) of The Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU)
Address: Komsomol’skiy Prospekt, 20, Moscow, 119146, Russian Federation. Other information: The 85th Main Centre for Special Services (GTsSS) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), also known as “military unit 26165” (industry nicknames: “APT28”, “Fancy Bear”, “Sofacy Group”, “Pawn Storm” and “Strontium”), is responsible for cyber-attacks with a significant effect constituting an external threat to the Union or its Member States. In particular, military intelligence officers of the GTsSS took part in the cyber-attack against the German federal parliament (Deutscher Bundestag) which took place in April and May 2015 and the attempted cyber-attack aimed at hacking into the Wi-Fi network of the Organisation for the Prohibition of Chemical Weapons (OPCW) in the Netherlands in April 2018. The cyber-attack against the German federal parliament targeted the parliament’s information system and affected its operation for several days. A significant amount of data was stolen and email accounts of several MPs as well as of Chancellor Angela Merkel were affected.
Ministry of External Relations
23 October 2020
gov.je