European Defense Industry Tightens Vigilance Over Suspected Russian-Linked Sabotage
European defense companies are stepping up security measures against suspected Russian-linked arson, explosions and cyberattacks. The Aerospace, Security and Defence Industries Association of Europe (ASD) has stressed the need for information-sharing and closer coordination among companies, governments and security authorities.
A series of suspicious incidents targeting defense companies and facilities involved in support for Ukraine across Europe has intensified calls for a broader review of industrial and national security, rather than a narrow focus on facility management.
ASD Calls for Cooperation Among Companies, Governments and Security Agencies
In a statement sent to the U.S. outlet Breaking Defense on Sept. 11, 2026, ASD said cases of sabotage and attempted sabotage targeting European defense-related organizations were increasing and urged the industry to remain on heightened alert.
ASD represents more than 4,000 companies in the aerospace, security and defense sectors across 22 countries. The association said priorities should include not only protecting facilities, but also sharing threat intelligence, coordinating responses to evolving risks and strengthening the resilience of business operations.
Suspicious Incidents Reported in Poland, Germany and the Baltic Region
In Poland, a major fire broke out on Aug. 31, 2026, at a facility operated by WB Electronics, which produces drones used by the Ukrainian military. Polish Prime Minister Donald Tusk said the incident may have been deliberate and raised the possibility of a connection to Russia, although the investigation remains ongoing.
German authorities blamed Moscow for an incident in August 2026 in which a drone carrying explosives approached a Ukrainian cargo aircraft near Leipzig/Halle Airport. Russia rejected the accusation as a fabricated provocation.
An explosion followed a truck fire at a storage facility operated by Bulgarian defense company EMCO on Aug. 10, 2026. A fire also broke out between Aug. 14 and 15 at a building housing Milrem Robotics, an Estonian manufacturer of unmanned ground vehicles. Authorities are investigating both incidents.
U.S. Intelligence Agencies Also Urge Defense Firms to Strengthen Security
The U.S. National Counterintelligence and Security Center, the FBI and defense-related agencies have urged greater vigilance, warning that Russian sabotage activity targeting Europe’s defense industry could also increase risks for U.S. companies.
According to guidance issued by U.S. authorities, Russian intelligence services and proxy groups may use local criminals or other collaborators to target defense companies, military facilities, logistics hubs and public utilities. Key warning signs include not only physical intrusion and arson, but also the recruitment of employees, photography of facilities, drone surveillance and cyber intrusions.
U.S. intelligence officials said a planned arson attack targeting a company linked to Ukraine was uncovered in the United Kingdom in 2024. They also said 18 people were arrested in Poland in connection with suspected sabotage plots directed by Russia and Belarus.
Security Priorities for Defense Companies
Integrating Physical and Cybersecurity
Defense companies should review perimeter fencing, access controls and video-surveillance systems while also strengthening cyber defenses for manufacturing equipment and supply chains. Because physical and cyberattacks can be combined, security departments operating in isolation may not be sufficient to address the threat.
Due Diligence on Supply Chains and Contractors
U.S. authorities have recommended conducting due diligence on suppliers and subcontractors and diversifying sources for critical components. Defense companies should reassess counterparties’ ownership structures, end users and technology-access permissions, while limiting access to sensitive information as much as possible.
Employee Training and Reporting of Suspicious Activity
Employees are often the first to notice information requests from outside actors, suspicious photography or unusual access to facilities. Companies should establish regular security training and reporting procedures, and ensure that employees’ travel, work routines and personal information are not exposed unnecessarily.
Protecting National Security and Industrial Competitiveness
As European defense companies expand their deliveries of weapons and equipment to Ukraine, they are becoming more directly exposed to the risks of Russian influence operations and sabotage. Since Russia’s full-scale invasion of Ukraine in 2022, the European Union has broadly restricted exports and technology support to Russia in the aerospace, space and defense sectors.
Rheinmetall has said the threat environment facing NATO members has become more aggressive since Russia’s invasion of Ukraine, adding that it adjusts security measures according to the risk level at each site. Corporate security spending is becoming not only a defensive measure to prevent production disruptions, but also part of an industrial policy aimed at preserving Europe’s defense-production capacity.
Still, further investigation and legal proceedings are needed before Russia can be conclusively blamed for individual incidents such as fires and explosions. The immediate task facing Europe’s defense industry is not to make definitive accusations, but to share threat information quickly and strengthen the resilience of facilities, personnel and supply chains in proportion to verified risks.
Frequently Asked Questions (FAQ)
Why have European defense companies been put on alert over Russia-related threats?
Because a series of suspected arson attacks, explosions, drone surveillance incidents and cyberattacks have targeted defense facilities and companies involved in supporting Ukraine. European authorities and intelligence agencies have identified Russia or Russian-linked groups as possible perpetrators in some cases.
What is ASD?
ASD is the association representing Europe’s aerospace, security and defense industries. It represents more than 4,000 companies in 22 countries and communicates the industry’s views on industrial policy and security issues.
What security measures should defense companies take?
They should strengthen access controls and facility surveillance while also operating cybersecurity, employee security training, supply-chain due diligence and suspicious-activity reporting systems. Establishing communication channels with governments, police and intelligence agencies in advance is also important.
Have all the recent incidents been confirmed as acts by Russia?
No. European authorities have raised the possibility of Russian links in some cases, but the causes and perpetrators of certain fires and explosions have not been conclusively established. Official investigative findings should therefore be distinguished from judicial determinations.
Should all business with Russia be halted?
The decision depends on each company’s business structure and the laws that apply. Companies must, however, comply with European Union sanctions and export controls on Russia, and thoroughly verify counterparties and end users to prevent the diversion of dual-use technologies and sensitive components.
