Romania Blames Russian Network for Arson at State Arms Subsidiary in Brasov

Key points

• A fire broke out on September 14 near CARFIL SA, a subsidiary of Romania's national arms company ROMARM, in Brasov.
• Romanian officials stated on October 26 that the arson was coordinated by a Russian network as part of a larger sabotage campaign in Europe.
• Three perpetrators were identified: two from Belarus and one from Ukraine, all allegedly coerced by Russian operatives.
• Two suspects were arrested in Germany while preparing similar attacks; the third is believed to be in Poland, with a European arrest warrant issued on October 26.
• Investigators believe the suspects instigated prior incidents also coordinated by Russia.
• The Romanian Intelligence Service stated the operations aim to intimidate states and weaken their defense contributions to European security.

Background

This incident follows a series of similar attacks in Europe, including an August arson attack on a defense contractor in Tallinn, Estonia, which authorities linked to Russian intelligence. In October, Lithuanian forces thwarted attempts to burn Starlink equipment, and a similar incident occurred in Poland. Romania has also faced direct impacts from the war in Ukraine, including drone activity in the Black Sea and the sinking of a civilian cargo ship on October 23.

Why it matters

The attack highlights the escalating use of hybrid warfare by Russia to probe NATO's security limits and sow chaos without triggering open war. It underscores the vulnerability of European defense infrastructure and the coordinated nature of these sabotage operations across multiple countries.

What to watch

European authorities are pursuing the third suspect in Poland. Analysts expect continued scrutiny of Russian hybrid tactics as they test the thresholds of international response and NATO solidarity.