Romanian intelligence disrupted a Russian sabotage operation targeting NATO military sites, national security facilities, critical infrastructure, and Ukrainian Antonov cargo aircraft operating in Romania. The suspect, a Russian citizen under surveillance since February 2026, documented communications centers, Romanian military bases used by NATO, and Ukrainian Antonov aircraft, the latter having been targeted previously by Russia in Germany. The operation forms part of Russia's broader shadow war involving espionage, sabotage, and use of proxies across Europe. Similar Russian hostile activities have been reported in other NATO countries including Denmark and the Baltic states. NATO continues air-policing missions and counteractions against incursions. The incident underscores Russia's ongoing hybrid warfare below the threshold of open military conflict.

Romanian intelligence disrupted a Russian sabotage operation targeting NATO military sites, national security facilities, critical infrastructure, and Ukrainian Antonov cargo aircraft operating in Romania. The suspect, a Russian citizen under surveillance since February 2026, documented communications centers, Romanian military bases used by NATO, and Ukrainian Antonov aircraft, the latter having been targeted previously by Russia in Germany. The operation forms part of Russia's broader shadow war involving espionage, sabotage, and use of proxies across Europe. Similar Russian hostile activities have been reported in other NATO countries including Denmark and the Baltic states. NATO continues air-policing missions and counteractions against incursions. The incident underscores Russia's ongoing hybrid warfare below the threshold of open military conflict.