# Russian-coordinated sabotage network in Europe

> Developing situation record from CLSTR: https://clstr.news/situations/russian-coordinated-sabotage-network-in-europe
> Updated: 2026-10-28T08:28:41.000Z. Sources: 116. Developments: 2.

Romanian intelligence services (SRI) and the Directorate for Investigating Organized Crime and Terrorism (DIICOT) identified a sabotage network coordinated by the Russian Federation. The network is linked to a September 14, 2026, fire at the Carfil industrial platform in Brașov, Romania, located near the state-owned weapons manufacturer CARFIL SA, a subsidiary of ROMARM.

Authorities described the activities as part of a broader Russian campaign of hybrid warfare targeting armament production facilities, logistics depots, and military training sites across the region. According to the SRI, coordinators in Russia assigned a list of targets across Europe, including both state and private armament production facilities, to undermine defense capabilities and regional security.

Investigations led to the identification of three foreign nationals residing in the European Union: two Belarusian citizens and one Ukrainian citizen. Following European arrest warrants issued by the Bucharest Court of Appeal, two suspects were arrested in Germany while allegedly preparing similar acts of sabotage. 

In Warsaw, the Polish Central Bureau of Investigation (CBŚP) arrested a 25-year-old Ukrainian national, identified as Artem S., on suspicion of participating in the preparation of sabotage acts in Romania. He is suspected of identifying targets for arson and securing financing for the operation. While a Warsaw court has placed him in preventive detention for seven days, Artem S. has refused extradition to Romania; a Polish judge will subsequently decide on the extradition procedure.

In response to the network’s activities, Romanian President Nicușor Dan condemned the actions as part of a broader Russian hybrid warfare campaign aimed at undermining European security and sovereignty. Furthermore, the Romanian Ministry of Foreign Affairs has summoned the Russian ambassador in Bucharest to protest the incidents.

## Claims

- A sabotage network coordinated from the Russian Federation was identified by the SRI. (reported by 46 sources)
- The network was involved in a fire on September 14, 2026, at the Carfil industrial platform in Brașov. (reported by 46 sources)
- The fire occurred near CARFIL SA, a subsidiary of CN ROMARM. (reported by 46 sources)
- Three foreign nationals are implicated: two Belarusians and one Ukrainian. (reported by 46 sources)
- The network targeted armament production facilities and other military/industrial objectives in the region. (reported by 43 sources)
- A third suspect was located in Poland. (reported by 35 sources)
- The Bucharest Court of Appeal issued European arrest warrants for the suspects. (reported by 25 sources)
- The arrest was based on a European Arrest Warrant issued by Romania. (reported by 9 sources)
- Artem S. is suspected of preparing the arson of a strategic weapons and ammunition facility in Romania. (reported by 6 sources)

## Timeline

### 2026-10-28: Ukrainian national arrested in Warsaw for suspected Romanian sabotage

A Ukrainian national, Artem S., was arrested in Warsaw for allegedly preparing sabotage against a Romanian weapons manufacturer in Brașov as part of a Russian-coordinated network.

14 sources. https://clstr.news/cluster/polish-police-arrest-ukrainian-national-in-suspected-russian-sabotage-plot

### 2026-10-26: Romania identifies Russian-coordinated sabotage network

Romanian authorities have uncovered a Russian-coordinated sabotage network linked to a September fire near a weapons factory in Brașov. Three foreign nationals are implicated in targeting regional military and'

105 sources. https://clstr.news/cluster/romania-identifies-russian-coordinated-sabotage-network

---
Cite as: Russian-coordinated sabotage network in Europe. CLSTR, https://clstr.news/situations/russian-coordinated-sabotage-network-in-europe