MILAN and KEILCE, Poland — Europe’s leading defense industry group is urging companies, governments, and security agencies to “work closely together” to anticipate sabotage threats after a string of mysterious fires and explosions, often at defense-linked sites across the continent.
“Reports of an increasing number of sabotage incidents and attempted sabotage targeting [European] defense-related organisations underline the need for vigilance across the sector,” a spokesperson from the Aerospace, Security & Defense Industries Association (ASD) of Europe, told Breaking Defense.
The spokesperson added that in this context that “it is more important than ever that industry, governments and security authorities work closely together to monitor evolving threats, share information and take appropriate measures to protect facilities and maintain secure, resilient operations.”
The warning from ASD, which says it represents over 4,000 companies in 22 countries, echoes those of European officials who are increasingly sounding the alarm — and pointing the finger directly at Moscow.
“The Russians are actively preparing acts of sabotage targeting the defense industry in Denmark,” Emil Græsholm, head of counter-intelligence at Denmark’s Security and Intelligence Service, told a local media outlet on Sept. 2. Græsholm warned that defense firms with ties to military support for Ukraine were particularly high-value prey.
The same day, German officials made headlines when they directly blamed Moscow for what’s alleged to be a failed sabotage plot at Leipzig/Halle Airport last month, in which a drone carrying explosives was found in the vicinity of a Ukrainian cargo aircraft.
Just days before on Aug. 31, a major fire broke out at the premises of WB Electronics, one of the largest private arms companies in Poland that produces drones used by the Ukrainian military. Ahead of a cabinet meeting last week, Polish Prime Minister Donald Tusk said that there was “no doubt” that the incident was deliberate and suggested that it was likely carried out on the behalf of Russia.
“This is a continuation of Russia’s escalatory actions throughout the region,” Tusk said. “Unfortunately, these are not the first cases and, even worse, they certainly won’t be the last.”
In August 2025 the London-based thinktank IISS published a study recording dozens of questionable incidents across Europe since 2018, saying Russia’s culpability in each ranged from “realistically possible” to “almost certain.”
In cases where Russia has been implicated, the Kremlin has routinely denied responsibility for the incidents. It called the recent German allegation specifically a “fabricated provocation.”
Under such a shadow, some European defense firms told Breaking Defense they’re continuously assessing their defense posture. (Many major firms did not respond to a request for comment or declined to discuss their own posture due to the sensitivity of the topic.)
A spokesperson for Germany’s Rheinmetall said that since the start of Russia’s invasion of Ukraine in 2022, federal and state security authorities have observed an increasingly “aggressive stance” towards NATO countries.
“In light of this assessment, Rheinmetall AG has reassessed the security situation at its sites on a risk-based basis and adjusted measures where necessary — thanks to our security strategy, we are able to respond swiftly to changing threat scenarios,” the spokesperson said.
In July 2024 CNN reported, citing US intelligence, that Rheinmetall CEO Armin Papperger had been targeted by the Russian government for assassination. (Russia called the report a “fake story.”)
Rheinmetall isn’t the only firm used to facing down potential threats.
On Aug. 10, a truck caught on fire at the storage facility of the Bulgarian private arms producer EMCO, known to have previously exported Soviet-era ammunition to Ukraine. Explosions spread through the company’s warehouse, which was ultimately destroyed. The investigation remains ongoing to determine the causes and gather evidence, per a statement from the Bulgarian prosecutor’s office.
An EMCO spokesperson told Breaking Defense that similar incidents took place in 2011, 2022, and 2023.
“Based on our past experience, it is certain that [the latest investigation] will not be resolved within the next ten years. It is completely natural for such explosions to disrupt the normal rhythm of work, but it doesn’t depend on us — it depends on the state,” the spokesperson said in an email statement. “Unless all EU/NATO countries unite, this phenomenon will only intensify.”
Days after the EMCO fire, another broke out overnight on Aug. 14-15 at a building housing Estonia-based Milrem Robotics, one of the primary makers of uncrewed ground vehicles bound for Ukraine.
Estonian Prime Minister Kristen Michal called the incident an arson attack in a statement published on X. He said, “The suspects have been identified, one of the lines of investigation is a possible act of sabotage and the involvement of Russia.”
In an email statement to Breaking Defense, Gert Hankewitz, Milrem’s director of communications, said that the company’s review and development of security measures is a “continuous process” that accounts for “changes in the operating and security environment.”
Given the sensitivity of the topic, Hankewitz said he could not comment on specific measures in place at Milrem facilities. But, he said, the company has not seen an impact on its day-to-day operations or existing customer orders.
Vladyslav Belbas, director general of the Ukrainian defense firm Ukraine Armor, said he believed the sabotage operations could presage a larger conflict between Russia and NATO nations. But first, NATO must respond, he said.
“First of all, there [are] a lot of Russian spies, so Europe will have to clear them, send them back to Russia,” he told Breaking Defense.