A hosting collective becomes a terrorist entity
On August 26, 2026, the US Treasury's Office of Foreign Assets Control added Autistici/Inventati — a Pisa-based, 25-year-old volunteer collective that runs encrypted email, the NoBlogs.org hosting platform, mailing lists and video conferencing for activist and civil-society groups — to the Specially Designated Nationals list as a Specially Designated Global Terrorist (SDGT) under Executive Order 13224 (Treasury press release). It was designated the same day as UK-based Palestine Action and the Masar Badil network, whose links run through Samidoun to the PFLP, a Foreign Terrorist Organization since 1997 (JURIST). The State Department says A/I hosts roughly 16,000 mailboxes, 1,500 websites and 10,000 blogs, and alleges it knowingly supplied "digital architecture" to anarchist cells behind 2026 rail-sabotage attacks in France, Italy, Germany and the Netherlands, and separately to PKK-linked users (State Department). OFAC's companion general license authorizes wind-down transactions only through 12:01 a.m. EDT on September 25, 2026 (OFAC recent actions); after that, US banks, payment processors, domain registrars and certificate authorities must treat any dealing with A/I as sanctions-exposed.
The case for taking infrastructure providers seriously
The steelman here is real. If anarchist cells genuinely used NoBlogs to claim rail-sabotage attacks and circulate bomb-making instructions, as State alleges, that is not abstract; European rail operators had real 2026 incidents to respond to, and a platform that vets users for ideological alignment before granting access — as A/I does — cannot claim the pure neutrality of an ISP that hosts anyone. Material-support law has long applied to people who knowingly provide services to a listed organization even without funding it directly, and Treasury has repeatedly targeted financial and logistical enablers of terrorism, not just operational cells, on the theory that cutting off support networks is more effective than chasing individual attackers after the fact.
What the sanction actually does
But EO 13224 is not a criminal charge, and the designation process gives A/I no pre-designation hearing, no Italian court ruling, and no chance to contest the factual predicate before the freeze takes effect. As Beniamino Irdi, senior fellow at the German Marshall Fund, told Decode39, the significance of this case is that "the logic of material support is being applied openly and forcefully to technological infrastructure" rather than to operational actors (Decode39). The mechanism that actually disables A/I is not the freeze of US-based property — it likely has none — but de-risking: once a hosting collective sits on the SDN list, any bank, payment processor, upstream host, registrar or certificate authority with US exposure has a strong incentive to preemptively sever ties rather than risk secondary-sanctions liability, Irdi notes. That cascade can end a service used daily by roughly 16,000 mailbox holders and 1,500 hosted sites — including book fairs, community radio and NGO projects with no connection to any attack — without an Italian prosecutor, an Italian judge, or an EU regulator ever weighing in. Italy's own intermediary-liability framework, under the Digital Services Act and national law, at least requires notice, proportionality and a path to judicial review before a hosting provider can be forced offline; OFAC's SDGT list requires none of that from the jurisdiction where the target actually operates.
Collective punishment for a multi-tenant platform
The EFF's Jillian York called the designation "scary," pointing out that A/I is functionally comparable to any alternative hosting or encrypted-email provider, and that using such a service — without financially supporting it — does not obviously meet the material-support standard EFF's lawyers read into the underlying statute, though the point is untested in court (Reason). That legal uncertainty matters because A/I, like any multi-tenant host, cannot easily distinguish a bomb-making manual from the thousands of legitimate blogs, mailing lists and calendars sharing the same infrastructure. Sanctioning the platform rather than prosecuting the individuals who allegedly misused it functions as collective punishment of everyone else on NoBlogs — precisely the proportionality problem the EU's own DSA framework was designed to avoid by requiring targeted takedowns over wholesale platform shutdowns.
A precedent that will travel
Washington's own materials distinguish EO 13224 (a Treasury administrative tool) from FTO status (which requires State Department findings reviewable in federal court) — a distinction the government leans on to justify a lighter process, but one that gives the designated entity fewer, not more, avenues to contest the underlying facts. If violent misuse of a hosting platform is provable, EU and Italian authorities already have tools — DSA orders, judicial blocking under Italian law, mutual legal assistance with US prosecutors — to compel the removal of specific illegal content or accounts without severing an entire collective from the global financial system by executive designation. Treating infrastructure providers as terrorist entities because some users misused them, rather than compelling those providers to remove specific illegal content, trades due process for speed and invites the same tool to be pointed at any encrypted host, VPN or federated platform whose users a future administration finds politically inconvenient. Proportionate intermediary liability means going after the conduct; SDGT designation, applied to infrastructure rather than operators, does not.