Adversary Intelligence — 2026-10-11

Estonian Counterintelligence Chief Says Russian Sabotage in Europe Has Entered Dangerous New Phase

BLUFMoscow's shift from symbolic sabotage to targeting defense-industrial sites with explosives marks an escalation that will strain European counterintelligence capacity and pressure governments to expand domestic security authorities.

Estonian Foreign Minister Margus Tsahkna said on September 29 that Russian special services ordered an August arson attack on defense firm Milrem Robotics in Tallinn, that the perpetrators were apprehended, and that Estonia summoned the Russian ambassador 12. The Kremlin rejected the accusation as "baseless" 1. Margo Palloson, director-general of Estonia's Internal Security Service, told ETV and Foreign Policy that Russian activity is "clearly systematic" and has shifted from symbolic targets to arms suppliers, with more explosives used 234. Palloson also said Estonia has arrested 20 people since 2025 who were recruited by Russian intelligence after traveling to Russia, and that as many as seven intermediary layers can separate saboteurs from Moscow 4.

Analysis
Russian sabotage now targets Europe's arms suppliers directly, and defense firms in Estonia, Denmark and elsewhere face a threat that physical-security advice and cyber hardening only partly address. The move from symbolic acts to arson and explosives raises civilian risk, and EU ambassadors reportedly have begun discussing a mass-casualty scenario. Intermediary chains, criminal groups and recruited amateurs give Moscow deniability, so attribution will lag attacks, as the weeks-long Milrem delay shows. Estonian officials see no conventional buildup against the Baltics, and sabotage has not yet eroded support for Ukraine. Evidence rests mainly on official Estonian statements, though Foreign Policy interviews add independent reporting. Tallinn may be stressing the arms-sector shift to win support for broader legal powers and defense spending, while Russia's tempo has changed less than framed. Further defense-site attacks and wider European counterintelligence powers are the developments to watch.
5 sources
  1. Estonia slams Russian sabotage after arson attack on defence company Milrem Robotics - Euronews
  2. Russia targeting European arms firms - Qatar Tribune
  3. Russia intensifies attacks on European arms industry - Informat.ro
  4. Russian Sabotage in Europe Is No Longer Symbolic - Foreign Policy
  5. Estonia says Russia ordered August arson attack on defence company - Reuters

View in full brief →

UNCLASSIFIED // OPEN SOURCE