Yesterday 18:27

The Ministry of Internal Affairs is stepping up patrols and security at strategic sites after a DIICOT investigation into a Russia-coordinated sabotage network

Raluca Ioana Draghici

26 October 2026, 18:27

Current Affairs

shutterstock.com

Always see our news on Google

The Ministry of Internal Affairs said Monday evening that the operational situation is under control and that it has intensified security measures near critical infrastructure, industrial platforms involved in defense, Romania’s main transport routes and major logistics warehouses. The decision comes after DIICOT announced that it is investigating two Belarusian citizens and a Ukrainian citizen for attempted acts of subversion.

The MAI operational structures are cooperating with institutions in the national defense and security system, as well as with NATO and EU partners, to identify and neutralize any potential acts of sabotage or destabilization. The institution is calling on economic operators and citizens to remain vigilant and call 112 if they observe unauthorized surveillance activities, suspicious individuals or abandoned packages in sensitive areas.

According to the authorities, the three suspects are allegedly part of a Russia-coordinated network that targeted military and industrial facilities in Romania and the region. Two of the suspects were arrested in Germany, while the third was located in Poland. Checks are continuing by the MAI, SRI, DIICOT and the General Directorate of Defense Intelligence.

Context: DIICOT investigations into networks suspected of subversive activities, preceded by similar foiled cases

In September 2026, DIICOT opened an investigation after a fire broke out on an industrial site in Brașov, near CARFIL SA, a subsidiary of CN ROMARM and part of the defense industry. The investigation was conducted with DIICOT police officers and support from the SRI, and prosecutors later claimed that targets in Romania and other European countries had allegedly been targeted.

Meanwhile, in the case of a Russian citizen, DIICOT announced that he had been detained after allegedly collecting photo and video information about military and critical infrastructure sites between February and July 2026, from counties such as Cluj, Constanța, Călărași, Ilfov, and from Bucharest; the SRI indicated that the operation allegedly followed a modus operandi similar to that of networks attributed to Russia, in the context of a sabotage plan. In addition, on September 8, 2026, the Bucharest Court of Appeal ordered the pretrial detention of the Russian citizen for 30 days.