Estonia attributes August arson at Milrem Robotics to Russian intelligence
Estonia concluded that an August fire at defence contractor Milrem Robotics in Tallinn was an act of sabotage ordered by Russian security services, following the extradition of three suspects from Latvia.
Estonian authorities announced on 29 September 2026 that an August arson attack against defence robotics manufacturer Milrem Robotics was ordered by Russian security services. Prime Minister Kristen Michal confirmed that the Estonian Internal Security Service (KAPO) reached this conclusion following an intelligence assessment. Estonian officials stated that the incident forms part of a broader campaign by Moscow to intimidate European countries and reduce Western military aid to Ukraine. Following the assessment, Foreign Minister Margus Tsahkna declared that Estonia will increase sanctions, enforce stricter travel limits on Russian citizens in Europe, and strengthen assistance for Ukrainian forces.
Today, we can state with full confidence that the arson attack on the Milrem building in Estonia on the night of August 15 was an act of sabotage ordered by the special services of the Russian Federation.
Facility attack in Tallinn
The arson occurred during the night of 14 to 15 August 2026 at a building used by Milrem Robotics on Betooni street (Betooni tänav) in the Lasnamäe district of Tallinn. Emergency rescue services arrived at the site and contained the flames quickly, preventing injuries and ensuring no personnel were endangered. Milrem Robotics produces automated defence technology, including THeMIS unmanned ground vehicles that European Union member states supply to Ukraine for casualty evacuations and ammunition transport. Following the attack, KAPO Director General Margo Palloson warned that defence contractors assisting Ukraine face heightened security risks and advised manufacturers to reinforce both physical and cybersecurity measures.
- Arson attack strikes the Milrem Robotics facility in Tallinn's Lasnamäe district.
- Latvian police arrest two suspects in Latvia and seize fire-starting evidence.
- A third suspect is apprehended by Latvian law enforcement.
- Latvia transfers the three suspects to Estonian authorities.
- Estonia publicly attributes the sabotage to Russian intelligence services.
Cross-border investigation and arrests
Regional law enforcement launched an immediate investigation that led to arrests across the border in Latvia. Latvian authorities detained two Latvian citizens suspected of executing the arson on 17 August 2026, apprehending a third Latvian suspect on 18 August 2026. Searches at properties connected to the suspects uncovered numerous data storage devices alongside items suitable for igniting fires. Latvian law enforcement transferred the three detainees to Estonian authorities between 17 and 18 September 2026. Palloson noted that intelligence sharing and international cooperation have enabled Baltic and European authorities to identify and detain more than 20 individuals involved in direct kinetic attacks executed for Russian intelligence services.
Diplomatic reactions and alliance stance
The Estonian Ministry of Foreign Affairs summoned the Russian chargé d'affaires on 29 September 2026 to register a formal protest over the sabotage. Kremlin spokesperson Dmitry Peskov dismissed the accusations against Moscow, describing them as groundless, reckless, and entirely disconnected from reality. Speaking to the Financial Times, Tsahkna argued that public attribution of sub-Article 5 operations is critical to prevent strategic miscalculations by Russian leadership. NATO Secretary General Mark Rutte addressed the escalating hybrid activity across member states during a press briefing, affirming that covert operations will not derail allied support.
Russia continues its dangerous campaign of hostile acts against Nato members. It is trying to weaken our resolve and stop our support for Ukraine. But Russia is held in check, failing on the battlefield just as it fails to undermine our unity and support for Ukraine.
