Lyce · Hybrid Watch

hw_e53aed10dafae145

Russian GRU-ordered arson attacks on a Co-op supermarket and a restaurant in Estonia.

An Estonian court found that Russian military intelligence (the GRU) had ordered a series of arson attacks in Estonia targeted at a Co-op supermarket in the village of Osula and, the following day, the Slava Ukraina restaurant in central Tallinn — a business associated with Ukrainian culture and national identity. The first act in Osula involved breaking a window, pouring in gasoline and igniting it inside the store, causing significant property damage; the next night a similar method was used on the restaurant, with the perpetrators fleeing Estonia afterward. According to court statements and prosecutor offices, the accused — Moldovan nationals acting on behalf of the GRU — were captured in Italy after a multistate investigation involving Latvian, Lithuanian and Polish authorities.The dynamics reflect Moscow’s use of outsourced agents with criminal profiles to evade direct attribution; Estonia’s internal security service highlighted that the need to recruit outsiders suggested difficulties in penetrating local networks. The arson incidents formed part of a broader pattern of sabotage operations across Europe that Western officials attribute to Russia’s intelligence apparatus, designed to sap investigative and policing resources, influence public opinion and undermine support for Ukraine. While the Kremlin publicly denies responsibility for such sabotage campaigns, the multi-national investigation and court rulings tied the Estonia events directly to GRU directives — making this a clear example of hybrid warfare that combines covert direction with overt destructive impact on foreign civilian infrastructure.

Occurrence
2025-01-31
Publication
2025-01-31T12:32:27Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
EE
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2025-01-31T12:32:27Z

    An Estonian court found that Russian military intelligence (the GRU) had ordered a series of arson attacks in Estonia targeted at a Co-op supermarket in the village of Osula and, the following day, the Slava Ukraina restaurant in central Tallinn — a business associated with Ukrainian culture and national identity. The first act in Osula involved breaking a window, pouring in gasoline and igniting it inside the store, causing significant property damage; the next night a similar method was used on the restaurant, with the perpetrators fleeing Estonia afterward. According to court statements and prosecutor offices, the accused — Moldovan nationals acting on behalf of the GRU — were captured in Italy after a multistate investigation involving Latvian, Lithuanian and Polish authorities.The dynamics reflect Moscow’s use of outsourced agents with criminal profiles to evade direct attribution; Estonia’s internal security service highlighted that the need to recruit outsiders suggested difficulties in penetrating local networks. The arson incidents formed part of a broader pattern of sabotage operations across Europe that Western officials attribute to Russia’s intelligence apparatus, designed to sap investigative and policing resources, influence public opinion and undermine support for Ukraine. While the Kremlin publicly denies responsibility for such sabotage campaigns, the multi-national investigation and court rulings tied the Estonia events directly to GRU directives — making this a clear example of hybrid warfare that combines covert direction with overt destructive impact on foreign civilian infrastructure.