Full Breakdown
Russian-Coordinated Sabotage Network Linked to September Fire at Romanian Weapons Facility
By Drooid · · How we work
In this breakdown
01
Core Event
On September 14 2026, a fire broke out at an industrial site in Brasov, Romania, adjacent to CARFIL SA, a subsidiary of the state-owned defence conglomerate ROMARM. The Romanian Intelligence Service (Serviciul Român de Informatii, SRI) announced that the blaze was caused by a sabotage network it identified as being coordinated from the Russian Federation.
Watch
Related reporting
brightcove
Romania says Russia-run sabotage network set fire near weapons factory
02
Background & Context
Romania, a NATO and EU member sharing more than 600 km of border with Ukraine, has repeatedly described a “hybrid war” waged by Russia against states that support Kyiv. President Nicusor Dan has linked recent incidents—including drone incursions, cyberattacks, disinformation campaigns and attacks on cargo vessels in the Black Sea—to this broader Russian strategy. The September fire is presented by Romanian authorities as part of that effort, which they say aims to intimidate, undermine defence capabilities and weaken European security contributions.
Visual evidence
Images from the story
03
Timeline
- September 14 2026 – Fire erupts at the CARFIL site in Brasov.
- October 26 2026 – SRI announces the discovery of the Russia-coordinated sabotage network. DIICOT confirms arrests of two suspects in Germany and issues a European arrest warrant for a third suspect in Poland.
- October 27 2026 – President Dan condemns the alleged Russian involvement on X, calling the acts a violation of Romania’s sovereignty.
04
Data & Statistics
- Three suspects identified: two Belarusians and one Ukrainian, all residing in EU member states.
- Two arrests made in Germany while the suspects were reportedly preparing further sabotage operations.
- One European arrest warrant issued for a suspect located in Poland.
- At least eight cargo vessels have been hit off the coasts of Romania and Bulgaria in the past three weeks, with roughly 34 sailors reported dead or missing, attributed by Romanian officials to Russian attacks.
05
Official Statements & Responses
- SRI statement: The network’s missions were not limited to Romania; coordinators in Russia assigned a “wide range of targets” across the region, including both state-owned and private arms facilities.
- DIICOT press release: The three foreign nationals are suspected of involvement in the Brasov sabotage operation; the two detained in Germany were preparing to commit similar acts. The agency described the sabotage as part of a coordinated effort aimed at weakening European democracies.
- Prime Minister Niculescu (statement in Chisinau): Confirmed that the sabotage network has been dismantled and pledged continued cooperation with NATO and EU partners.
06
On-the-Ground Reports
Romanian investigators said the fire damaged the headquarters of several commercial companies near the CARFIL plant. Video released by SRI showed a person climbing a fire-escape ladder, followed by flashes and flames, and two individuals cycling away from the scene. Local authorities estimated material damage at over €400,000.
07
What’s Next
Romanian prosecutors are seeking the extradition of the two Belarusian suspects from Germany and the Ukrainian suspect from Poland. Authorities indicated that investigations into additional sabotage attempts at international military facilities and Ukrainian-training sites in Romania are ongoing, with further cooperation expected from partner European security services.