# Romania says it thwarted Russian sabotage plot against NATO facilities and critical sites

*Tuesday, September 8, 2026 at 6:07 PM UTC — Hamer Intelligence Services Desk*

**Published**: 2026-09-08T18:07:42.194Z (3h ago)
**Category**: intelligence | **Region**: Eastern Europe
**Importance**: 8/10
**Sources**: OSINT
**Permalink**: https://hamerintel.com/data/articles/17284.md
**Source**: https://hamerintel.com/summaries

---

**Deck**: Romania’s intelligence service says it has broken up a Russian-directed effort to scout military, NATO and critical infrastructure targets, after months of tracking a suspect taking photos and video of sensitive sites.

Romania’s intelligence service says it has disrupted a Russian sabotage operation aimed at military, NATO and critical infrastructure targets on its territory, underscoring how the war in neighboring Ukraine is feeding covert activity inside alliance states.

On 8 September, Romania’s intelligence service, the SRI, said it had monitored a Russian suspect since February 2026 as he inspected sensitive locations. According to the agency, the suspect photographed and filmed Romanian military bases, NATO facilities, communications centers, security headquarters and other critical infrastructure.

The SRI said one of the assignments involved surveilling Ukrainian Antonov military transport aircraft while they were on Romanian territory. The service announced that it had foiled the operation but did not specify how it was disrupted, what had happened to the suspect, or whether additional people were involved.

The SRI presented the case as part of a broader Russian effort to collect targeting information and potentially prepare for future sabotage or disruptive actions against national and NATO-linked assets.

For Romanians living near bases and infrastructure that have quietly become hubs for supporting Ukraine — from logistics routes to training areas — the case is a reminder that these facilities are both symbols of NATO membership and possible entries on Russian target lists.

Operationally, the kind of photographic and video reconnaissance described by the SRI can support several goals: refining potential missile or drone targets, planning physical sabotage intended to disrupt troop movements or supply lines, or tracking how NATO units rotate through key sites. The interest in Ukrainian Antonov aircraft suggests a focus on airlift routes that have been central to keeping Ukraine supplied.

Strategically, the case fits reports of Russian activity against NATO’s eastern flank that range from cyber intrusions to suspected arson and sabotage attempts in other European countries. Romania occupies a key position as both a neighbor of Ukraine and a Black Sea state facing Russian forces across the water, so any attempt to compromise its infrastructure could affect the alliance’s wider posture.

The SRI’s decision to publicize the disruption serves both as a deterrent message and as reassurance that agencies are actively looking for such threats. It also raises questions about how many similar operatives or networks might be operating with lower profiles.

Developments to watch now include whether Romanian authorities pursue public prosecution, seek diplomatic measures, or introduce new security steps around military and infrastructure sites. A coordinated NATO response, such as a joint statement on hybrid threats or additional support for counter-sabotage efforts along the eastern flank, would indicate the alliance sees this as part of a larger pattern rather than an isolated case.