Romanian intelligence links fire at Carfil arms plant in Brașov to Russia-coordinated sabotage network

In brief

• Romania's intelligence service says a Russia-coordinated network caused a September 14 fire at an industrial site in Brașov next to a state arms company's subsidiary.
• A Ukrainian and two Belarusians are wanted; two were arrested in Germany and one was located in Poland.
• Romania is seeking extradition, and the targets reportedly included other arms producers and military facilities in the EU.

Fire at Carfil site and the investigation

The fire broke out on September 14, 2026, on an industrial site in Brașov, next to CARFIL SA, a subsidiary of the state defence group CN Romarm. Several companies had offices in the affected area. Romania's intelligence service (SRI) said on the evening of October 26 that it had uncovered the network with foreign partners and that it was coordinated from Russia (Пожежа біля збройової компанії в Румунії: розвідка заявила про диверсійну мережу, яку координує Росія – Suspilne) (Від розвідки об'єктів до підпалів: у Румунії викрили мережу РФ, яка готувала диверсії на оборонних підприємствах ЄС – Espreso).

Suspects and arrests

Prosecutors at the directorate for investigating organised crime and terrorism (DIICOT) said the case involves a Ukrainian citizen and two Belarusians living in EU countries. Courts in Bucharest issued European arrest warrants in absentia (Двух беларусов и украинца подозревают в поджоге возле оборонного завода в Румынии – Zerkalo). Two of the suspects, who were allegedly preparing similar attacks, were detained in Germany through international cooperation. The third was located in Poland, and a separate warrant was issued for him on October 26 (Румунія викрила диверсійну мережу з РФ, причетну до спроби підпалу збройного заводу – Європейська правда). Romania is seeking the extradition of all three.

Targets beyond Romania

According to the intelligence service, the network's tasks were not limited to Romania. Its coordinators reportedly selected a wide range of targets in the region, including state and private arms producers and other military and industrial facilities. Prosecutors said the suspects also considered other sites in Romania and elsewhere in the EU as targets.

Wider context

Intelligence officials described the case as part of a broader campaign of Russia-coordinated sabotage operations in Europe. Investigations this year also found other attempts aimed at facilities in Romania, including international military sites and facilities used to support Ukraine.