Romania seeks extradition of three suspects in alleged Russia-coordinated sabotage network
Romanian authorities say intelligence has identified a sabotage network coordinated by Russia and linked to a September arson at an industrial facility near a state arms company in central Romania. Prosecutors are seeking the extradition of three suspects — two Belarusian citizens detained in Germany and a Ukrainian citizen detained in Poland.
Key points
- Romanian intelligence announced the Russia-coordinated sabotage network on October 26.
- Prosecutors seek extradition of three suspects: two Belarusian citizens and one Ukrainian citizen.
- The two Belarusian suspects were detained in Germany; the Ukrainian suspect was detained in Poland.
- The suspects are linked to a September arson at an industrial facility near a state arms company in central Romania.
- Romanian intelligence says the network targeted state and private weapons manufacturers and other military and industrial sites.
- The alleged operation is presented as part of Russia’s broader hybrid campaign against Romania and European security.
Why it matters
The case links an industrial arson near a Romanian state arms company to an alleged coordinated sabotage network operating across several European countries. It also involves cross-border arrests in Germany and Poland and an extradition request concerning suspects from Belarus and Ukraine. Romanian intelligence says the network targeted weapons manufacturers and other military and industrial sites, placing the alleged operation within a wider Russian hybrid campaign against European security.
What happened
On October 26, Romanian intelligence said it had identified a sabotage network coordinated by Russia. Romanian prosecutors subsequently sought the extradition of three people suspected of involvement in a September arson at an industrial facility near a state arms company in central Romania. The three are alleged to be part of the same network. Two Belarusian citizens were detained in Germany, while a Ukrainian citizen was detained in Poland. According to Romanian intelligence, network coordinators selected specific targets, including state and private weapons manufacturers and other military and industrial facilities.
How Ukrainian sources describe it
Ukrainian coverage highlights the detention of a Ukrainian citizen in Poland alongside two Belarusian citizens in Germany, as well as the cross-border extradition request. It links the alleged network to Russia and frames the case within Russia’s broader hybrid campaign against countries that support Ukraine. The reported targeting of weapons manufacturers and military-industrial facilities is presented as directly relevant to Ukrainian and European security.
How international sources describe it
The incident is framed as a Romanian investigation into an alleged Russia-coordinated sabotage network affecting European military and industrial targets. Alongside the case, France, Germany, the United Kingdom, Italy and Poland prepared a draft statement describing Russia as Europe’s most acute and long-term security threat, calling for greater European responsibility for security and stronger NATO, and reaffirming support for Ukraine.
Where reporting differs
Romanian authorities and President Nicusor Dan attribute sabotage and other hybrid operations in Romania to Russia. Moscow has repeatedly denied accusations of sabotage, cyberattacks, disinformation and attacks on cargo vessels in Romania.
Background
Romanian President Nicusor Dan said Russia was conducting a hybrid war against Romania to destabilize states that support Kyiv. He classified drone incursions, cyberattacks, disinformation campaigns, sabotage and attacks on cargo vessels near Romanian waters as elements of that campaign. Poland and Romania had previously detained eight people over an alleged Russian sabotage operation involving a parcel intended for Ukraine that was expected to explode.