{
  "url": "https://openlegislation.uk/eu-decision-2020-1537/annex",
  "json_url": "https://openlegislation.uk/eu-decision-2020-1537/annex.json",
  "legislation": "eudn/2020/1537",
  "legislation_title": "Council Decision (CFSP) 2020/1537 of 22 October 2020 amending Decision (CFSP) 2019/797 concerning restrictive measures against cyber-attacks threatening the Union or its Member States",
  "legislation_url": "https://openlegislation.uk/eu-decision-2020-1537",
  "path": "annex",
  "kind": "annex",
  "number": null,
  "heading": null,
  "text": "The following entries are added to the list of natural and legal persons, entities and bodies set out in the Annex to Decision (CFSP) 2019/797:\nA.. Natural persons\nName\nIdentifying information\nReasons\nDate of listing\n‘7.\nDmitry Sergeyevich BADIN\nДмитрий Сергеевич БАДИН\nDate of birth: 15 November 1990\nPlace of birth: Kursk, Russian SFSR (now Russian Federation)\nNationality: Russian\nGender: male\nDmitry Badin took part in a cyber-attack with a significant effect against the German federal parliament (Deutscher Bundestag).\nAs a military intelligence officer of the 85th Main Centre for Special Services (GTsSS) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), Dmitry Badin was part of a team of Russian military intelligence officers which conducted a cyber-attack against the German federal parliament (Deutscher Bundestag) in April and May 2015. This cyber-attack targeted the parliament’s information system and affected its operation for several days. A significant amount of data was stolen and the email accounts of several MPs as well as of Chancellor Angela Merkel were affected.\n22.10.2020\n8.\nIgor Olegovich KOSTYUKOV\nИгорь Олегович КОСТЮКОВ\nDate of birth: 21 February 1961\nNationality: Russian\nGender: male\nIgor Kostyukov is the current Head of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), where he previously served as First Deputy Head. One of the units under his command is the 85th Main Centre for Special Services (GTsSS), also known as “military unit 26165” (industry nicknames: “APT28”, “Fancy Bear”, “Sofacy Group”, “Pawn Storm” and “Strontium”).\nIn this capacity, Igor Kostyukov is responsible for cyber-attacks carried out by the GTsSS, including those with a significant effect constituting an external threat to the Union or its Member States.\nIn particular, military intelligence officers of the GTsSS took part in the cyber-attack against the German federal parliament (Deutscher Bundestag) which took place in April and May 2015 and the attempted cyber-attack aimed at hacking into the Wi-Fi network of the Organisation for the Prohibition of Chemical Weapons (OPCW) in the Netherlands in April 2018.\nThe cyber-attack against the German federal parliament targeted the parliament’s information system and affected its operation for several days. A significant amount of data was stolen and email accounts of several MPs as well as of Chancellor Angela Merkel were affected.\n22.10.2020’\nB.. Legal persons, entities and bodies\nName\nIdentifying information\nReasons\nDate of listing\n‘4.\n85th Main Centre for Special Services (GTsSS) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU)\nAddress: Komsomol’skiy Prospekt, 20, Moscow, 119146, Russian Federation\nThe 85th Main Centre for Special Services (GTsSS) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), also known as “military unit 26165” (industry nicknames: “APT28”, “Fancy Bear”, “Sofacy Group”, “Pawn Storm” and “Strontium”), is responsible for cyber-attacks with a significant effect constituting an external threat to the Union or its Member States.\nIn particular, military intelligence officers of the GTsSS took part in the cyber-attack against the German federal parliament (Deutscher Bundestag) which took place in April and May 2015 and the attempted cyber-attack aimed at hacking into the Wi-Fi network of the Organisation for the Prohibition of Chemical Weapons (OPCW) in the Netherlands in April 2018.\nThe cyber-attack against the German federal parliament targeted the parliament’s information system and affected its operation for several days. A significant amount of data was stolen and email accounts of several MPs as well as of Chancellor Angela Merkel were affected.\n22.10.2020’",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2020/1537/annex",
    "retrieved_at": "2026-11-01T15:12:06.941723+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}