Romanian special services have identified a sabotage network that, according to the investigation, was coordinated from Russia. Its participants are involved in a fire at an industrial site in the city of Brasov, located next to a state-owned arms production enterprise. As part of the investigation, three suspects have been identified, two of whom were detained in Germany.
The Romanian Intelligence Service (SRI) reported this on October 26 reported. Details of the investigation were also published by the state agency Agerpres, citing the prosecutor's office for combating organized crime and terrorism (DIICOT).
The investigation links the activities of the sabotage group to the fire that occurred on September 14, 2026, at the Carfil industrial site in Brasov. The fire damaged premises of several commercial enterprises located near the CARFIL SA arms factory — a subsidiary of the state defense concern ROMARM.
However, Romanian authorities did not report damage to the production facilities of the arms factory itself.
During the investigation, the involvement of three people was established — two citizens of Belarus and one citizen of Ukraine, residing in European Union countries. According to the prosecutor's office, all three were part of a network that received instructions from coordinators in Russia.
Two suspects were detained in Germany, where, according to the investigation, they were preparing similar acts of sabotage. The Bucharest Court of Appeal issued European arrest warrants for them. The third suspect is in Poland; on October 26, an arrest warrant was also issued for him.
The Romanian prosecutor's office is taking necessary actions to extradite all three suspects. The investigation continues under the article on attempted acts of sabotage.
According to case materials, the network's activities were not limited to Romanian territory. Investigators established that its participants considered the possibility of attacks on other targets in European Union states.
Among the potential targets, according to SRI information, were state and private arms production enterprises, as well as military and industrial facilities.
Romanian intelligence considers the uncovered network as part of a broader sabotage campaign directed against European countries supporting Ukraine.
SRI reported that during 2026 it identified other attempts of sabotage in Romania, including against military facilities used for training Ukrainian servicemen.
According to the Romanian special service, such operations are aimed at weakening the defense potential of European states and their ability to participate in ensuring regional security.
The agency also spoke about the specifics of recruiting perpetrators. According to intelligence data, organizers of such operations often search for people through social networks, offering money for performing simple tasks. Subsequently, recruits may be involved in more serious crimes, including arson and destruction of property.
For recruitment, according to SRI, financial difficulties and other vulnerabilities of potential perpetrators are often used. When attempting to refuse further participation, organizers may resort to threats and blackmail.
The investigation is being continued by the DIICOT prosecutor's office, the Romanian Intelligence Service, the Ministry of Internal Affairs and the military intelligence of the country together with European partners.
Recall, previously Kurs.com.ua reported that on September 8, Romanian law enforcement officers detained a 40-year-old Russian citizen suspected of collecting information about military facilities, critical infrastructure, and Ukrainian Antonov cargo planes. According to the investigation, the man acted as part of preparations for sabotage operations.
The current investigation concerns another episode — the fire on September 14 at an industrial site near the arms enterprise in Brasov. Russian authorities have repeatedly denied accusations of organizing sabotage on the territory of European states.
