Russia sabotage threat reaches Finland, security service warns

Thursday 3rd September 2026 on 17:15 in Finland

Finland, Russia, sabotage

Russia’s sabotage activity in Europe is increasing, and similar operations could take place in Finland, Finland’s Security Intelligence Service told Yle. The service said a drone carrying explosives found near a Ukrainian cargo aircraft at Leipzig-Halle Airport in Germany was consistent with Russia’s methods.

German authorities are investigating the attempted attack, which took place in early August. German intelligence assessments indicate that the people involved acted on behalf of the Russian state.

Finland’s Security Intelligence Service said the case was not unexpected, as Russia is reactivating its sabotage operations after a quieter period. It also shows Russia’s willingness to carry out highly risky operations.

“The threat is real here as well, even though Finland itself is not a key target country,” the service said in an email.

Sabotage attacks have mainly focused on large European Union countries, Poland and the Baltic states. However, the service said the defence industry and organisations involved in supporting Ukraine are potential targets in all European countries, including Finland.

The German government has said the Leipzig case fits a known pattern of Russian hybrid operations. Finland’s Security Intelligence Service said its assessment of the case was consistent with that of the German authorities.

“In our assessment, drones containing explosives are consistent with the methods used by Russia,” the service said.

In the main target countries for sabotage, attacks have particularly involved arson and vandalism. Targets have included Western defence companies and the supply chain for material support to Ukraine.

The attacks have often been directed at low-level targets or places that are easy to access, such as business premises and warehouses.

Russia also frequently uses intermediaries recruited through social media or messaging applications. These people carry out acts in return for payment and may not know who they are working for.

“Russian intelligence recruits intermediaries internationally,” the service said.

German media reported on Wednesday that authorities had identified two suspected perpetrators of the attempted drone attack at Leipzig-Halle Airport. One is Russian and holds a Latvian passport, while the other is Belarusian and holds a Russian passport.

According to German media, genetic traces found at the scene matched records in databases held by authorities in Finland, among other countries.

Finland’s National Bureau of Investigation has not responded to Yle’s request for comment on the suspects’ possible links to Finland. The Security Intelligence Service said it could not comment on possible information concerning individuals.

The service said no Russian sabotage activity has so far been confirmed in Finland. Authorities are nevertheless monitoring the situation continuously.

Russia has carried out sabotage operations in Europe for several years. During that time, Finland’s Security Intelligence Service and other Western intelligence agencies have monitored the activity. Information about the targets, methods and plans involved has helped European countries prepare for such operations.

The service added that a significant proportion of Russia’s sabotage cases are known to authorities, and that many have also been reported publicly.

Source 
(via Yle)