US Treasury sanctions more Russian hackers, including nine GRU members and several entities related to Project Lakhta, saying they interfered in US elections
The US Department of the Treasury has issued new sanctions against Russian nationals who allegedly attempted to interfere with US elections.
Context & Ripple Effects
This action lands mid-way through a year in which Treasury has been steadily mapping Russia's interference apparatus by sanction. In March, the administration hit five entities including the IRA and nineteen individuals (sanctioned the IRA and 19 individuals), and in June it targeted three individuals and five firms tied to NotPetya and other cyberattacks. Today's designation of nine GRU members and Project Lakhta-linked entities extends that ledger from the troll-farm side to military intelligence.
Project Lakhta is the funding vehicle behind the IRA, so this round closes the loop between the influence operation Treasury already penalized and the intelligence officers and financiers above it. The later record confirms the pattern held: the 2021 package blacklisted six tech companies supporting Russian intelligence (blacklisted six tech companies backing Russian intelligence) alongside SolarWinds-related designations.
First-order effects
- Nine GRU officers and several Project Lakhta-linked entities are now cut off from the US financial system — assets frozen, US persons barred from dealing with them, and any dollar-clearing transactions they touch exposed to blocking.
- Banks and payment processors that previously cleared funds for these named entities must screen them out immediately or face secondary-exposure risk under the new designations.
Second-order effects
- Service providers and intermediaries around the sanctioned network become the next target surface — the trajectory later confirmed when Treasury moved beyond individuals to blacklist six tech firms supplying Russian intelligence services.
- Russian state-linked operators face rising cost and friction in moving money through Western rails, pushing financing toward harder-to-trace channels and non-Western intermediaries.
Third-order effects
- Treasury is institutionalizing a standing sanctions map of Russia's election-interference and cyber infrastructure — individuals first, then funders like Project Lakhta, then enablers and suppliers — a template it has since applied to Iranian deepfake operations and North Korean IT-worker networks.
- If the pattern holds, financial sanctions function as the primary ongoing enforcement tool for election interference, with each designation cycle hardening the separation between Russian state cyber actors and the global financial system regardless of diplomatic posture.
The trend: Treasury is building a rolling, multi-year sanctions map of Russia's election-interference and cyber apparatus, expanding each cycle from individual operatives to funders, enablers, and technical suppliers.