Lyce · Hybrid Watch
hw_cc8429079d735fe4
Romanian intelligence service foils Russian-backed sabotage plot in Bucharest.
Romania’s national intelligence service (SRI) announced on 21 October 2025 that it had disrupted a sabotage operation “directly coordinated” by Russian intelligence services. According to the SRI, two Ukrainian citizens entered Romania from Poland on 14–15 October and deposited parcels containing improvised explosive and incendiary devices inside car-parts shipments destined for a Ukrainian-oriented courier company in Bucharest. The devices were said to contain thermite and barium nitrate—materials often associated with industrial sabotage—and were designed for remote detonation. Authorities state that the suspects used counter-surveillance techniques and had been under surveillance for weeks before the plot was uncovered. The incident occurred in Romania’s capital region rather than a border-venue, indicating that hybrid threats can reach deep inside allied states, not only at peripheral zones. The dynamics reflect how Russia deploys clandestine sabotage: covert agents, chemical/thermite devices, use of third-country nationals, and an aim not of overt military confrontation but of disruption, confusion and logistics degradation. By framing the plot as “Russian-backed,” Romania signalled its view that this was not mere crime but state-level hybrid warfare, requiring heightened security posture and threat perception.
E/M/R/S scores
- EExistence0/4 · Not assessed
- MIntent0/4 · Not assessed
- RRussian actor link0/4 · Not assessed
- SRussian state responsibility0/4 · Not assessed
Facts
No facts
Sources
-
- Role
- discovery_lead
- Date
- 2025-10-13T22:00:00Z
Romania’s national intelligence service (SRI) announced on 21 October 2025 that it had disrupted a sabotage operation “directly coordinated” by Russian intelligence services. According to the SRI, two Ukrainian citizens entered Romania from Poland on 14–15 October and deposited parcels containing improvised explosive and incendiary devices inside car-parts shipments destined for a Ukrainian-oriented courier company in Bucharest. The devices were said to contain thermite and barium nitrate—materials often associated with industrial sabotage—and were designed for remote detonation. Authorities state that the suspects used counter-surveillance techniques and had been under surveillance for weeks before the plot was uncovered. The incident occurred in Romania’s capital region rather than a border-venue, indicating that hybrid threats can reach deep inside allied states, not only at peripheral zones. The dynamics reflect how Russia deploys clandestine sabotage: covert agents, chemical/thermite devices, use of third-country nationals, and an aim not of overt military confrontation but of disruption, confusion and logistics degradation. By framing the plot as “Russian-backed,” Romania signalled its view that this was not mere crime but state-level hybrid warfare, requiring heightened security posture and threat perception.