Russian sabotage in Romania
Three foreign nationals are accused of Russian-coordinated sabotage against Romania
Ştefan Stoica, 27.10.2026, 13:50
DIICOT, the prosecutor’s office investigating organized crime and terrorism, and the Romanian Intelligence Service (SRI) announce they have investigated the criminal activities of 3 foreign nationals, two Belarusians and a Ukrainian citizen residing in EU member states.
As part of a sabotage network coordinated from the Russian Federation, they were involved in an explosion and fire that occurred last month at an industrial facility in Brașov, in central Romania. The site is a subsidiary of Romarm, Romania’s main manufacturer of military equipment.
Romanian judges have issued European arrest warrants against the individuals. According to DIICOT, two of the suspects were found and placed in pre-trial detention in Germany as they were preparing to carry out similar acts. On Monday, a third European arrest warrant was issued for another suspect, who had been located in Poland.
Investigations are under way regarding the offence of attempted sabotage, and steps are being taken to have the 3 individuals extradited to Romania. DIICOT says the suspects also targeted other sites in Romania and other EU member states.
In the current regional and European security climate, defined by a proliferation of hybrid warfare tactics, the evolution of asymmetric risks that could threaten public order or strategically important sites in Romania is monitored permanently, DIICOT said.
The Romanian Intelligence Service also confirmed that the operations of the Moscow-coordinated sabotage network were not limited to Romania, but had an extensive list of targets in the region, including state-owned and private weapon production facilities, and other sites of military and industrial interest.
Investigations conducted this year have uncovered further attempts targeting locations in Romania, including international military facilities or sites used for the training of Ukrainian armed forces, the SRI reports. According to the Service, such actions are intended to intimidate, to compromise defence capabilities, and to weaken the contribution of the targeted states to European and regional security.
The SRI adds that recruitment typically takes place via social media. Those approached are initially offered money for specific, isolated tasks, such as observing or photographing certain sites. Over time, the assignments become increasingly serious, potentially escalating to acts of destruction, arson, or even assassination. These networks specifically exploit financial vulnerability, personal addictions, or a history of criminal activity.
According to specialised agencies, Romania is not the only country targeted by acts of sabotage as part of the hybrid war waged by Russia in Europe. Germany, for instance, has recently seen a number of investigations and arrests linked to sabotage attempts targeting critical infrastructure, the energy grid, military sites, and international connections. (AMP)
