Romanian authorities say a September 14 fire near the CARFIL defense plant in Brașov was caused by a Russian-coordinated sabotage network; three suspects, a Ukrainian and two Belarusians, were arrested in Poland and Germany, and Romanian agencies say the group planned further operations. The wider cases include fires or attempted fires at drone and Starlink sites and an explosives-carrying drone near a Ukrainian aircraft at Leipzig; Germany and Estonia attributed incidents to Russia, which denied responsibility for Leipzig and says it is not involved in such attacks, while Bulgaria called the Sofia-area fire sabotage without naming Russia.
Summary written by our automated pipeline from the outlets' reporting. How it works
Grouped by where each speaker is from. Quotation marks are the speaker's own words; other lines are our summaries.
Moscow denied the accusation that Russia was responsible for the drone attack at Leipzig airport, calling it absurd.
Our summary of BBC News
Moscow denies the accusations.
Our summary of Meduza, via Wall Street Journal
Putin denied that Russia was responsible for the Leipzig incident.
Our summary of Deutsche Welle
Lavrov described the accusations against Russia as the beginning of a real war.
Our summary of Deutsche Welle
The German government publicly identified Russia as being behind the explosive-drone incident early this month, and the relationship between the two men played a decisive role in that decision.
Our summary of Yonhap News Agency, via ARD
Merz said Russia's August 4 attack on Leipzig Airport demonstrated the relevance of counter-UAV cooperation for Germany.
Our summary of Ukrinform
German officials attributed the Leipzig airport drone incident to Russia.
Our summary of France 24 · also 1 other outlet
Regional and local government
The Berlin administration claimed that the drone seen in Leipzig in August belonged to Russia.
Our summary of Hürriyet
The Romanian Intelligence Service said the sabotage operations aim to intimidate and undermine the defense capabilities of affected states and weaken their contributions to European and regional security.
Our summary of The Kyiv Independent
The service warned that these actions are intended to intimidate, undermine defence capabilities and weaken countries' contributions to European and regional security.
Our summary of Ukrainska Pravda, via European Pravda
Dan says the sabotage actions are unacceptable and constitute a serious violation of Romania's sovereignty and security.
Our summary of Ukrainska Pravda, via European Pravda
Anti-terrorism officers detained the man in Warsaw under a European Arrest Warrant issued by Romania.
Our summary of Notes from Poland
Points where outlets or parties give conflicting facts or readings. Each side is summarised by our pipeline; its sources are listed under it.
Estonia’s Internal Security Service concluded that Russian security services commissioned the attack.
Russia maintains that it was not involved in such attacks.
Russia · our summary of BBC News
Germany said Russia was responsible and formally accused Moscow.
Putin and the Russian government denied Russian responsibility; Moscow called the accusation absurd.
Vladimir Putin, Russia's president · our summary of Deutsche Welle
Russia · our summary of Yonhap News Agency
Reactions from other countries and bodies, others involved, and commentary.
Macron said France had not recorded attacks similar to the Leipzig incident.
Our summary of Ukrinform
Lithuanian intelligence says Smolyaninov headed the Ukrainian desk in Russian military intelligence and specialized in psychological operations.
Our summary of Ukrainska Pravda, via European Pravda
Rutte said Russia was repeatedly testing the Allies across Europe through airspace violations, arson, sabotage and the August hybrid attack on Leipzig Airport.
Our summary of Ukrinform
Western officials accuse Moscow of escalating a hybrid campaign against European countries through cyber-attacks, sabotage and drones violating European airspace.
Our summary of BBC News
Investigators noted similarities between the Leipzig drone's warhead and improvised explosive devices found in caches elsewhere in Europe.
Our summary of Ukrainska Pravda, via Politico
Western secret services consider Smolyaninov one of the coordinators of Russian sabotage operations in Europe.
Our summary of Ukrainska Pravda, via European Pravda · long-held position
Experts warn that the rise in Russian hybrid attacks is a way for Russia to test how far it can push NATO and Europe.
Our summary of The Kyiv Independent
On August 4, a quadcopter carrying plastic explosives landed near a Ukrainian cargo aircraft at Leipzig/Halle Airport without detonating.
Sources: The Kyiv Independent
A quadcopter carrying plastic explosives went undetected at Leipzig/Halle Airport and landed near a Ukrainian cargo aircraft without detonating, as part of a wider pattern of sabotage activities against European cities.
An arson attack set fire to a Tallinn building used by Milrem Robotics during the night of August 14–15; the fire was quickly extinguished, with no one hurt or major damage reported.
Sources: Le Monde
A fire broke out on the night of August 15 in a building used by Milrem Robotics in Tallinn, causing no casualties or major damage.
On September 1, Germany formally accused Russia of carrying out the Leipzig attack.
Sources: The Kyiv Independent · Meduza (via Wall Street Journal)
Germany formally accused Russia of carrying out the Leipzig attack on Sept. 1.
Germany officially accused Russia of attempting to sabotage the airport.
In September, an explosives-laden drone was found near Wunstorf Air Base.
Sources: The Kyiv Independent (via Süddeutsche Zeitung)
The new classification was spurred by the discovery of an explosives-laden drone near the Wunstorf air base in September, along with sabotage incidents involving naval vessels.
A fire broke out on September 14 near CARFIL SA, a subsidiary of Romania’s state-owned Romarm, and burned about 1,000 square meters of buildings.
Sources: The Kyiv Independent · Yonhap News Agency · Yonhap News Agency
Romanian officials said the Sept. 14 fire near the arms company was coordinated by a Russian network.
The fire broke out on September 14 in an industrial zone where the Romarm plant is located and burned about 1,000 square meters of buildings.
A fire broke out on the 14th of last month at the industrial complex housing Romania’s state-owned Romarm factory and burned about 1,000 square meters of a building.
On September 29, Estonian authorities said their security service concluded that Russian security services commissioned the Milrem arson; Foreign Minister Margus Tsahkna called the actions unacceptable and said Russia’s chargé d’affaires was being summoned.
Sources: CBC News
Estonian authorities concluded that Russian security services commissioned the arson attack on a defence company that provides military vehicles to Ukraine.
Tsahkna said the actions were unacceptable and that Russia's charge d'affaires in Tallinn was being summoned to his ministry.
“…was a deliberate and pre-planned act commissioned by Russian security services.”
On October 26, Romanian officials said a Russian network coordinated the Brașov fire.
Sources: The Kyiv Independent
Romanian officials said the Sept. 14 fire near the arms company was coordinated by a Russian network.
On October 27, Poland’s Central Investigation Bureau announced that officers had detained the Ukrainian suspect in Warsaw under Romania’s European Arrest Warrant.
Sources: Notes from Poland
Anti-terrorism officers detained the man in Warsaw under a European Arrest Warrant issued by Romania.
Each outlet's headline, linked to its article. Non-English headlines are machine-translated. The groupings and notes on what each outlet emphasises are automated.
None of our outlets is based in Romania, Lithuania or Estonia. Our outlets in Russia and United States didn't cover it. No statements from the government or officials of Estonia, Ukraine or United States are in our sources.
Written by our automated pipeline from the statements in the coverage; each point lists the statements it rests on.
Romanian officials say Russian operatives coerced the three Brașov suspects and that the fire was part of a wider campaign attributed to Russia. The Romanian Intelligence Service says Russian coordinators assigned the group regional targets, including arms manufacturers, and that the suspects were planning further operations in another EU member state when arrested.
Directorate for Investigating Organized Crime and Terrorism (DIICOT), DIICOT · our summary of The Kyiv Independent
Romanian officials · our summary of The Kyiv Independent
Romanian Intelligence Service · our summary of Ukrainska Pravda, via European Pravda
Romanian Intelligence Service · our summary of Ukrainska Pravda, via European Pravda
The reported incidents range from the explosives-carrying drone near a Ukrainian cargo aircraft at Leipzig and the arson attack on Tallinn’s Milrem Robotics building to fires or attempted fires involving Starlink sites in Bulgaria and Lithuania, and drone-manufacturing facilities in Estonia and Poland. Drone remains and material suspected to be explosive were also found near Germany’s Wunstorf Air Base.
Our summary of The Kyiv Independent
Our summary of Meduza, via Wall Street Journal
Authorities, German authorities · our summary of Yonhap News Agency, via Süddeutsche Zeitung
Authorities, German authorities · our summary of Yonhap News Agency, via Süddeutsche Zeitung
Germany formally accused Russia of the Leipzig attack and said it was certain Russia was behind it. German security agencies linked the incident to GRU Unit 29155; an ARD account said the relationship between two men played a decisive role in the decision to publicly blame Russia. RIA Novosti said Germany assigned responsibility without providing specific evidence.
Germany · our summary of The Kyiv Independent
Germany · our summary of Deutsche Welle
German security agencies · our summary of Ukrainska Pravda, via European Pravda
Germany · our summary of Yonhap News Agency, via ARD
The Sofia-area Starlink case has several reported damage counts: prosecutors said three of 18 antennas were destroyed, two partly burned and three more damaged; Democratic Bulgaria said 11 antennas had been set alight, while Yonhap reported eight burned. Bulgarian intelligence chief Plamen Tonchev said he assumed the fire was deliberate sabotage; the Bulgarian government described it as sabotage without identifying Russia as responsible.
Lithuanian Prime Minister Mindaugas Sinkevicius said warnings to the company and stronger security helped foil the attempted Starlink-site arson, but that Lithuania’s warning system did not function perfectly. Crisis center chief Vilmantas Vitkauskas linked the incident to efforts to disrupt Starlink and Ukrainian operations, identified Ukraine as the target, and said authorities were searching for suspects.
Experts warned that increased Russian hybrid attacks could be a way to test how far Russia can push NATO and Europe. The Kyiv Independent’s Megi Benia argued for cross-border information sharing among aviation, law-enforcement, intelligence and military bodies; she said intercepted-drone numbers poorly measure overall system capability and urged Europe to force Russia to react and face operational costs. The outlet also argued that Germany’s roughly four-week delay in publicly assigning responsibility for Leipzig weakened attribution’s value for deterrence and defense.
Experts · our summary of The Kyiv Independent
Our summary of The Kyiv Independent
Our summary of The Kyiv Independent
Our summary of The Kyiv Independent
Publisher logos load from the publishers' own sites. Report an error on this page · Corrections