Romanian authorities have announced the discovery of a sabotage network they allege was coordinated by Russia. Officials believe this group was responsible for a major industrial fire that broke out in the city of Brasov on September 14.
Romania’s Intelligence Service described the blaze as part of a broader, organized sabotage campaign aimed at destabilizing European states. The agency stated these operations specifically target arms manufacturers and other sites of military and industrial significance. According to the report, the goal of these activities is to intimidate, undermine regional defense capabilities, and weaken the collective security contribution of targeted nations.
The Romanian Directorate for Investigating Organized Crime and Terrorism (DIICOT) identified three suspects involved in the Brasov incident: two Belarusian nationals and one Ukrainian, all of whom reside within the European Union. Two of these individuals were apprehended in Germany while preparing to execute further attacks, while the third suspect remains at large in Poland.
Intelligence officials warned that these networks frequently recruit individuals via social media under the guise of simple tasks, such as photographing specific locations. Once involved, the complexity and severity of the assignments often escalate, potentially progressing to vandalism, arson, or lethal violence. Over time, “the tasks become increasingly serious, potentially involving acts of vandalism, arson or even murder”, it said. Recruits for such networks are often found on social media and are first offered money “for a seemingly harmless task”, such as “observing or photographing certain targets”, according to Romania’s Intelligence Service.
Romania, which shares a border with Ukraine exceeding 600 kilometers, has faced recurring pressure throughout the ongoing conflict. President Nicusor Dan has characterized these events as part of a hybrid war, noting that the country has been subjected to cyberattacks, disinformation, and unauthorized drone incursions. Foreign Minister Dan Neculaescu confirmed that the Brasov attack was one of many across Europe targeting military production, adding that such aggression will not deter the nation from strengthening its defense resilience. Romania, a member of the EU and NATO, shares a border of more than 600km with Ukraine.
Russia has not yet provided a response to these specific allegations, having consistently denied involvement in similar accusations of espionage or sabotage in the past.
The incident in Brasov reflects a growing wave of security threats across European defense facilities. In recent months, Bulgaria experienced multiple fires at munitions sites operated by the arms manufacturer EMCO. Similarly, an August explosion damaged a KNDS ammunition factory near Rome, and firebombs were reported near a defense company’s office in Munich during September.
Beyond land-based sabotage, maritime threats have escalated as well. Approximately 34 sailors have been reported missing or dead following attacks on at least eight cargo vessels off the coasts of Romania and Bulgaria over the past three weeks. President Dan labeled these maritime strikes as a tragic consequence of Russia’s ongoing aggression. There was no immediate comment from Russia on Romania’s claim.
This pattern of activity follows previous international security concerns, including a plot intercepted last year where individuals in Poland and Romania were detained for allegedly attempting to send exploding parcels to Ukraine.
