Romanian intelligence identifies Russian sabotage network behind Carfil factory fire

Romania's intelligence service, SRI, announced on Monday, 26 October 2026, that it had identified a sabotage network coordinated from Russia. The network was involved in a fire on 14 September 2026 at the Carfil industrial platform in Brașov, near CARFIL SA, a subsidiary of CN ROMARM.

SRI said it worked with domestic and foreign partners to confirm the involvement of several citizens from former Soviet states who reside in European Union countries. Judicial procedures are underway in Romania and in cooperation with authorities in several European states.

“Recruitment usually happens through social media, and people initially receive money for apparently harmless tasks, such as observing or photographing objectives.”

According to SRI, the network's missions were not limited to Romania. Russian coordinators assigned an extended list of targets across the region, including state and private arms production facilities and other military and industrial sites of interest.

The case is part of a broader Russian sabotage campaign in Europe. Investigations this year also uncovered other attempts targeting objectives in Romania, including international military facilities and sites used to train Ukrainian armed forces.

SRI said such actions aim at intimidation, affecting defence capabilities, and weakening the contribution of targeted states to European and regional security.

The service explained that recruitment usually happens through social media. People are initially paid for seemingly harmless tasks such as observing or photographing objectives, before tasks become more serious and can lead to destruction, arson, or even assassination. Those who refuse may face pressure and blackmail.

Members of the network frequently use transport, accommodation, and communication means to hide their identities.