European Security — 2026-10-11

Russian Sabotage Operations in Europe Escalating Beyond Symbolic Attacks Says Foreign Policy Analysis

BLUFRussia's shift from symbolic vandalism to targeting defense suppliers with explosives will very likely prompt another European government to publicly attribute a new attack by mid-November 2026.

Estonian Foreign Minister Margus Tsahkna wrote on X on September 29 that an August arson attack on Tallinn-based defence firm Milrem Robotics, a supplier of unmanned ground vehicles to Ukraine, was ordered by Russian special services 12. He said the perpetrators were apprehended and Estonia summoned the Russian ambassador, while Kremlin spokesman Dmitry Peskov called the allegation baseless 12. In an interview with Foreign Policy, Estonian Internal Security Service chief Margo Palloson said earlier attacks targeted symbolic objects such as cars, flags, and a Ukrainian restaurant, and that Estonia assesses the Milrem attack aimed to disrupt supplies to Ukraine 3. Palloson also said the operations increasingly use explosives and as many as seven layers of intermediaries, including criminal groups and recruits from social media 3. Lithuanian Prime Minister Mindaugas Sinkevicius said intelligence services have no proof Moscow is preparing something bigger 2.

Analysis
A European government will very likely publicly attribute a new sabotage, arson, or explosive attack on its territory to Russian state services or Russian-directed proxies between October 12 and November 15, 2026. Confidence is high because Estonia, Germany and Denmark issued attributions within weeks of each other, and Estonian and Danish officials expect the tempo to rise. That convergence rests largely on shared Estonian government sourcing, not independent verification. The move toward defence suppliers, explosives and layered criminal intermediaries makes attribution harder and civilians more exposed. Lithuanian officials see no sign of a larger operation, so the pattern is sustained, deniable pressure on Ukraine's supply chain, not a step change. Governments may also be disclosing more to build support for Ukraine and deter attacks, so more announcements need not mean more operations. Defence ministries and Ukraine-supplying firms would need to harden facilities and deepen counterintelligence cooperation.

5 sources

Estonia accuses Russia of arson attack on defence firm supplying Ukraine - Al Jazeera
Estonia slams Russian sabotage after arson attack on defence company Milrem Robotics - Euronews
Russian Sabotage in Europe Is No Longer Symbolic - Foreign Policy
Russia escalating hybrid attacks in Europe - Stars and Stripes
Estonia says Russia ordered August arson attack on defence company - Reuters