Before the warning about possible new coordinated attempts from Russia, the Romanian authorities had announced the intensification of security measures around critical infrastructure, industrial facilities with a defense profile, and major logistics warehouses, after DIICOT announced that it was investigating possible acts of sabotage. MAI stated that it was working with institutions within the national defense and security system and with NATO and EU partners, asking economic operators and citizens to remain vigilant and report suspected cases to 112.
Also before that moment, SRI made public a case in which it claimed to have prevented an act of sabotage: a Russian citizen under monitoring since February 2026 had allegedly documented, through photographs and videos, communications centers, military bases used by NATO allies, the headquarters of defense/security institutions, and critical infrastructure facilities, while SRI described an operating method similar to that of networks coordinated by the Russian Federation in other European states.