Event 79c858fa-2243-4a4a-b309-405fb2a8a6da

Healthy processed event from Hybrid War Tracker

Status: Healthy (Processed) Last Updated: 2026-02-14 Confidence: Low Classification: Terrorism & Criminal Proxy Tactics > Terrorism > Bomb threats, assassination plots, targeted killings Country: Estonia Where: Land Node: Node 2: 5th Column Tag: Estonia Tag: arson attack Tag: Russian intelligence Tag: GRU Tag: Russian sabotage Tag: Ukrainian restaurant Tag: Tallinn Tag: influence operation Tag: hybrid warfare Tag: proxy operatives Aggressor Confidence: High
🕐
Event Time
1y ago
Created
1d ago
✏️
Updated
21h ago

Summary

Headline: Russian GRU-Ordered Arson Attack on Ukrainian Restaurant in Tallinn, Estonia

Short Summary: An arson attack on the Slava Ukraina restaurant in Tallinn on January 31, 2025, was directed by Russian military intelligence (GRU) and executed by two Moldovan cousins named Ivan Chihaial. The younger suspect, recruited by the GRU in summer 2024, previously committed arson on a supermarket near a military area and was paid in cryptocurrency likely originating from the GRU. They conducted reconnaissance from January 27-29 before the attack. The older suspect performed the fire-setting act, while the younger filmed it; the footage was published by the GRU. Both suspects were arrested in Italy on February 11, 2025. Estonian prosecutors noted the attack fits a series of Russian attempts to polarize and destabilize Baltic societies by targeting monuments, officials, and Ukrainian interests. The Internal Security Service highlighted increasing challenges for Russian intelligence to recruit operatives inside Estonia, leading to hiring foreign convicts imprisoned in Russia. The younger Chihaial received a 6.5-year sentence; the older, six months.

Extended Summary: An arson attack on the Slava Ukraina restaurant in Tallinn on January 31, 2025, was directed by Russian military intelligence (GRU) and executed by two Moldovan cousins named Ivan Chihaial. The younger suspect, recruited by the GRU in summer 2024, previously committed arson on a supermarket near a military area and was paid in cryptocurrency likely originating from the GRU. They conducted reconnaissance from January 27-29 before the attack. The older suspect performed the fire-setting act, while the younger filmed it; the footage was published by the GRU. Both suspects were arrested in Italy on February 11, 2025. Estonian prosecutors noted the attack fits a series of Russian attempts to polarize and destabilize Baltic societies by targeting monuments, officials, and Ukrainian interests. The Internal Security Service highlighted increasing challenges for Russian intelligence to recruit operatives inside Estonia, leading to hiring foreign convicts imprisoned in Russia. The younger Chihaial received a 6.5-year sentence; the older, six months.

Description

On January 31, 2025, an arson attack was carried out on the Slava Ukraina Ukrainian restaurant in the Telliskivi district of Tallinn, Estonia. Two Moldovan citizens, cousins named Ivan Chihaial, executed the attack under orders from Russian military intelligence (GRU). The older Chihaial smashed a window and set the restaurant on fire at 4:30 a.m., while the younger filmed the event and later uploaded footage to YouTube at GRU direction. The younger Chihaial had earlier been recruited in summer 2024, performed a prior arson against a supermarket near a military training area, and received payment in cryptocurrency linked to GRU. Both were apprehended by Italian law enforcement on February 11, 2025. Estonian authorities view this as part of a broader Russian sabotage campaign to polarize society, with previous attacks targeting monuments and officials. The Internal Security Service noted difficulties in recruiting local agents, leading Russian intelligence to recruit foreigners imprisoned in Russia as operatives. The younger suspect was sentenced to six and a half years, and the older to six months.

Event Classification

Aggressor Event

Rationale

The event explicitly describes a discrete hostile operation ordered by Russian GRU targeting Estonia, with named actors, dates, and direct attribution by authorities. No defensive preparation is described.