Romanian Intelligence Service Foils Alleged Russian-Coordinated Sabotage Operation Targeting NATO Bases

The alleged operation was investigated jointly with Romania’s DIICOT organized-crime prosecutors, the Interior Ministry’s organized-crime directorate, the Defense Intelligence Directorate and foreign partner services.
SRI said the suspected activity resembled Russian-linked operations that Romanian authorities had disrupted in Romania in 2024 and 2025.
The focus on Ukrainian Antonov aircraft echoed an incident at Germany’s Leipzig/Halle Airport on Aug. 5, when a drone carrying a suspected explosive device was found beside a Ukrainian An-124; Western intelligence assessments later linked that device to the Russian government.
The Russian Embassy had not commented on the Romanian intelligence service’s allegations at the time of reporting.
Romania's intelligence service said it stopped a Russian-coordinated sabotage operation in February. An intermediary allegedly instructed a Russian citizen to photograph NATO military bases, Ukrainian cargo aircraft, and critical infrastructure across Romania SRI. The suspect had been under surveillance for months as part of a joint investigation involving Romanian prosecutors, defense officials, and foreign partners.
The SRI said Russia continues to target vulnerable groups for sabotage missions across Eastern Europe SRI. This operation mirrors tactics seen in other alleged Russian-linked incidents that Romanian authorities disrupted in 2024 and 2025. The use of intermediaries to distance the Russian government from direct involvement is a common method in Moscow's covert operations.
The alleged operation specifically targeted Ukrainian Antonov cargo planes in Romania SRI. This mirrors an August 2025 incident at Germany's Leipzig/Halle Airport, where authorities found a drone carrying a suspected explosive device beside a Ukrainian An-124 aircraft. Western intelligence assessments later linked that device to Russia Western Intelligence.
Romania's investigation involved DIICOT organized-crime prosecutors, the Interior Ministry's directorate, and the Defense Intelligence Directorate SRI. Foreign partner services also participated, reflecting broader NATO concerns about Russian sabotage across the alliance. Russia has not commented on the allegations as of the time of reporting.
NATO allies have uncovered multiple covert Russian operations targeting critical infrastructure. Recent disruptions include attempts to sabotage undersea cables near the Svalbard archipelago in Arctic waters NATO Intelligence. These coordinated efforts reflect Russia's broad strategy of destabilizing NATO nations through intelligence operations and sabotage networks.
Publishers
13
Articles
58
Reach
71