Entity record
Igor Olegovich KostyukovPerson
Igor Olegovich Kostyukov appears on the Canada Consolidated Autonomous Sanctions List (SEMA) and 4 other official sanctions lists, designated by US OFAC, European Union, UK HM Treasury (OFSI), Global Affairs Canada (SEMA), UK Foreign, Commonwealth & Development Office (FCDO) under programs CYBER2, CAATSA - RUSSIA, CYB, Chemical Weapons, Cyber, Russia, Schedule 1, Part 1, The Cyber (Sanctions) (EU Exit) Regulations 2020, The Chemical Weapons (Sanctions) (EU Exit) Regulations 2019; reflected as observed on 2026-07-31.
Also known as
- Igor KOSTYUKOV
- Игор Костюков (Cyrl)
- Igor Kosťukov
- Игорь Олегович КОСТЮКОВ (Cyrl)
- Igor Kostyukow
Designations
- Designated by US OFAC under program CYBER2. Other entities under CYBER2
- Designated by US OFAC under program CAATSA - RUSSIA. Other entities under CAATSA - RUSSIA
- Designated by European Union under program CYB since . Other entities under CYB
- Designated by UK HM Treasury (OFSI) under program Chemical Weapons since . Other entities under Chemical Weapons
- Designated by UK HM Treasury (OFSI) under program Cyber since . Other entities under Cyber
- Designated by Global Affairs Canada (SEMA) under program Russia since . Other entities under Russia
- Designated by Global Affairs Canada (SEMA) under program Schedule 1, Part 1 since . Other entities under Schedule 1, Part 1
- Designated by UK Foreign, Commonwealth & Development Office (FCDO) under program The Cyber (Sanctions) (EU Exit) Regulations 2020 since . Other entities under The Cyber (Sanctions) (EU Exit) Regulations 2020
- Designated by UK Foreign, Commonwealth & Development Office (FCDO) under program The Chemical Weapons (Sanctions) (EU Exit) Regulations 2019 since . Other entities under The Chemical Weapons (Sanctions) (EU Exit) Regulations 2019
Reason for listing
Per Global Affairs Canada (SEMA) (listed ):
SEMA Schedule 1, Part 1, Item 724 (official source)
Per UK Foreign, Commonwealth & Development Office (FCDO) (listed ):
UKSL CHW0009 — Measures: Asset freeze, Travel Ban, Director Disqualification Sanction — Igor Olegovich Kostyukov, given his senior leadership role as First Deputy Head of the GRU (a.k.a. GU) at that time, is responsible for the possession, transport and use in Salisbury during the weekend of 4 March 2018 of the toxic nerve agent “Novichok” by officers from the GRU. (official source)
Per UK Foreign, Commonwealth & Development Office (FCDO) (listed ):
UKSL CYB0011 — Measures: Asset freeze, Travel Ban, Director Disqualification Sanction — Igor Kostyukov is the Head of the Russian General Staff’s Main Intelligence Department (GRU), and was previously First Deputy Head. In this capacity, Igor Kostyukov is responsible for cyber attacks carried out by the 85th Main Centre of Special Services (GTsSS), also referred to as Field Post Number 26165, APT28, Fancy Bear, Sofacy Group, Pawn Storm, Strontium. These attacks include the cyber attack against the German federal parliament (Deutscher Bundestag) in April and May 2015. The cyber attack against the German federal parliament (Deutscher Bundestag) targeted the parliament’s information system and affected its operation for several days. A significant amount of data was stolen and e-mail accounts of several MPs as well as Chancellor Angela Merkel were affected (official source)
Per UK HM Treasury (OFSI) (listed ):
CHW0009 and CYB0011 — Igor Olegovich Kostyukov, given his senior leadership role as First Deputy Head of the GRU (a.k.a. GU) at that time, is responsible for the possession, transport and use in Salisbury during the weekend of 4 March 2018 of the toxic nerve agent “Novichok” by officers from the GRU. Igor Kostyukov is the Head of the Russian General Staff’s Main Intelligence Department (GRU), and was previously First Deputy Head. In this capacity, Igor Kostyukov is responsible for cyber attacks carried out by the 85th Main Centre of Special Services (GTsSS), also referred to as Field Post Number 26165, APT28, Fancy Bear, Sofacy Group, Pawn Storm, Strontium. These attacks include the cyber attack against the German federal parliament (Deutscher Bundestag) in April and May 2015. The cyber attack against the German federal parliament (Deutscher Bundestag) targeted the parliament’s information system and affected its operation for several days. A significant amount of data was stolen and e-mail accounts of several MPs as well as Chancellor Angela Merkel were affected. (official source)
Per US OFAC:
(Linked To: MAIN INTELLIGENCE DIRECTORATE) (official source)
Key properties
- Date of birth
- Place of birth
- Amur Oblast; UNKNOWN
- Nationality
- Russia
- Position
- First Deputy Chief of GRU; Head of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU/GU); Head of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU/GU). Head of the Russian General Staff's Main Intelligence Department (GRU) of the Russian Federation; Head of the Russian General Staff's Main Intelligence Department (GRU) of the Russian Federation; The current Head of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), where he previously served as First Deputy Head. One of the units under his command is the 85th Main Centre for Special Services (GTsSS) (a.k.a. “Military Unit 26165”, “APT28”, “Fancy Bear”, “Sofacy Group”, “Pawn Storm” and “Strontium”).
- Country
- RUSSIA
- Gender
- male
Identifiers
- Passport
- 100130896 · Russia
- Passport
- 100132253 · Russia
- Secondary sanctions risk:
- Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201
- OFSI Group ID
- 13748
- UK Sanctions List Unique ID
- CYB0011
- UK Sanctions List Unique ID
- CHW0009
Source list & list version
| Source list | List version | Manifest SHA-256 | Status | Verify |
|---|---|---|---|---|
| Canada Consolidated Autonomous Sanctions List (SEMA)Sanctions list Global Affairs Canada | ca_dfatd_sema_sanctions@2026-06-12 | eec3bacdc08a4a46… | List version (signing pending) | — |
| EU Consolidated Financial Sanctions ListSanctions list European Union (Council / DG FISMA) | 20260612-001 | 33df7d2e49ec829f… | List version (signing pending) | manifest |
| UK Sanctions List (UKSL)Sanctions list UK Foreign, Commonwealth & Development Office (FCDO) | gb_fcdo_uksl@2026-08-04 | 6f5e8b8ed92cccf0… | List version (signing pending) | — |
| UK OFSI Consolidated List of Financial Sanctions TargetsSanctions list UK HM Treasury — Office of Financial Sanctions Implementation (OFSI) | 20260610-001 | 4d14d0d8a5584fff… | List version (signing pending) | manifest |
| OFAC Specially Designated Nationals (SDN) ListSanctions list US Department of the Treasury, Office of Foreign Assets Control | 20260613-001 | dbfaf0c020d646a9… | List version (signing pending) | manifest |
About these sources
Canada's Consolidated Autonomous Sanctions List, maintained by Global Affairs Canada — designations under the Special Economic Measures Act (country programs), the Justice for Victims of Corrupt Foreign Officials Act (Canada's Magnitsky law), and UN Act regulations.
What a match means: A match is a binding Canadian sanctions designation — dealings with the party are generally prohibited under Canadian law; treat as a direct compliance hit.
The EU's Financial Sanctions Files (FSF) — the European Commission's consolidated feed of every person, group and entity subject to an EU asset freeze under Council CFSP decisions and their implementing Regulations (Russia/Ukraine, terrorism, WMD proliferation, and more).
What a match means: A match is an EU sanctions designation — funds and economic resources generally cannot be made available to this party under EU law; treat as a direct compliance hit.
The UK Sanctions List (UKSL), published by the Foreign, Commonwealth & Development Office — since 28 January 2026 the single, current source for all UK sanctions designations (financial, immigration, trade and transport measures), superseding the older OFSI Consolidated List.
What a match means: A match is a current, binding UK sanctions designation — treat as a direct compliance hit and escalate immediately.
The UK's former OFSI Consolidated List of Financial Sanctions Targets, maintained by HM Treasury. OFSI closed this list on 28 January 2026 — current UK sanctions designations now publish only to the FCDO UK Sanctions List (also in this catalog) — and it is retained here as a historical source.
What a match means: A match reflects a UK financial-sanctions designation recorded before the 28 Jan 2026 cutover; check whether the same party also appears on the current UK Sanctions List, and treat either appearance as a genuine UK sanctions hit, not a stale false positive.
The US Treasury's Office of Foreign Assets Control (OFAC) Specially Designated Nationals and Blocked Persons List — the United States' primary sanctions list, naming persons, companies, vessels and aircraft whose property is blocked under US sanctions authorities (IEEPA, TWEA, the Kingpin Act, Global Magnitsky, and program-specific executive orders).
What a match means: A match is a direct US sanctions hit — the named party is designated and, absent a license, US persons are generally barred from dealing with them; escalate immediately rather than clearing the alert yourself.
First observed ; last confirmed present in Canada Consolidated Autonomous Sanctions List (SEMA) list version ca_dfatd_sema_sanctions@2026-06-12, observed .
This page reflects the official Canada Consolidated Autonomous Sanctions List (SEMA), version ca_dfatd_sema_sanctions@2026-06-12, as observed on 2026-07-31. ProofAML is not the issuing authority.
Request a correction or dispute (distinguishes a data-handling error on our side from the underlying official designation, which is the issuing authority's record).
How to cite this page
Igor Olegovich Kostyukov. ProofAML. This page reflects the official Canada Consolidated Autonomous Sanctions List (SEMA), version ca_dfatd_sema_sanctions@2026-06-12, as observed on 2026-07-31. ProofAML is not the issuing authority. URL: https://proofaml.com/people/igor-olegovich-kostyukov-nk76101ec8/
Machine-readable export (FTM + lineage): /data/entities/76.json (record key nk76101ec8)