The EU has imposed sanctions (asset freeze and travel ban) on 6 people and 3 entities for their involvement in the “Wannacry”, “NotPetra”, “Operation Cloud Hopper” cyber-attacks, and attempted attack on the Organisation for the Prohibition of Chemical Weapons (OPCW). These are the first designations under the EU’s cyber sanctions regime. Those listed are said to be responsible for or involved in cyber-attacks originating outside the EU with significant or potentially significant effect, which constitute an external threat to the EU or its member states, third states or international organisations.