Skip to content

TRACE-DS Intelligence Report

The Carfil fire was real; the story outgrew its file

SRI and DIICOT tied the 14 September fire next to the CARFIL SA arms plant in Brașov to a network coordinated from Russia. The core holds: the fire was set, a court issued three arrest warrants and Polish police detained a suspect. The bigger claims do not yet: no official text names Russian intelligence services, none says the plant was hit, and no German authority has confirmed the two arrests.

ELEVATEDRomania110 sources analyzed5 key findings

Executive summary

On 26 October 2026 SRI announced a sabotage network „coordonată din Federația Rusă”, involved in the 14 September fire on the Carfil industrial platform in Brașov, „în imediata apropiere” of CARFIL SA, the ROMARM subsidiary that makes ammunition. DIICOT reported three European arrest warrants, issued in absentia by the Bucharest Court of Appeal, for one Ukrainian and two Belarusians: two held in Germany, one located in Poland. This analysis maps 183 actors in politics, civil society, the media and abroad, tests five competing accounts against 19 evidence rows, and asks who gains if the story is believed.

The core of the case holds. CCTV published by NewsBV on 18 September shows a man on the hall’s fire escape at 02:50 and an explosion after he left. A Romanian judge accepted DIICOT’s evidence for three warrants, and Polish police detained a 25-year-old Ukrainian in Warsaw, according to RMF FM. SRI’s two earlier announcements of Russian-directed sabotage both reached court; one ended in a final conviction.

The packaging does not hold yet. DIICOT’s communiqué never mentions Russia; the police tie the case to Russia by the „tipologia” of earlier cases. The hall that burned housed two car services, an inspection station and a laundry, not arms production. „Coordonată direct de către serviciile secrete ale Federației Ruse” first appears in Digi24’s lead, in no official text. No German authority has said a word about the two Belarusians: none of the federal prosecutor’s 31 releases since 2 July mentions them.

SRI gains most if the story is believed. It wrote the release, chose its timing and framed it, after two public attacks in ten days and with an interim director since 2023. The cabinet, ROMARM and DIICOT gain too. But the facts that carry the case sit outside SRI’s control. The leading account, at 42%, is a real Russia-linked arson oversold as an attack on the arms plant; the account as told stands at 28%, a story built for institutional gain at 9%. The first test is abroad: German confirmation of the two arrests and the Polish surrender ruling.

Key findings

  1. 1

    The fire was set deliberately, and the case against three suspects is backed by a court.

    CCTV from 18 September, physical traces, three European arrest warrants from the Bucharest Court of Appeal and a detention in Warsaw put the core of the case outside SRI’s control. Confidence: moderate.

  2. 2

    No official text names Russian intelligence services or says the arms plant was hit.

    SRI writes „coordonată din Federația Rusă” and places the fire „în imediata apropiere” of CARFIL SA. DIICOT never mentions Russia; the police cite the „tipologia” of earlier cases. The hall housed car services, an inspection station and a laundry. Confidence: high on the texts.

  3. 3

    The stronger version came from the press.

    Digi24’s lead added „coordonată direct de către serviciile secrete” and a first headline about sabotaging the military factory; two outlets copied the sentence word for word. Eight outlets moved the fire from the platform to the plant. Confidence: high.

  4. 4

    Nobody abroad has confirmed the arrests.

    None of the German federal prosecutor’s 31 releases since 2 July mentions the two Belarusians, no Polish authority has confirmed the Warsaw detention reported by RMF FM, and the EU, NATO and eight embassies said nothing. The cheapest check left is one question to the Generalbundesanwalt. Confidence: moderate, for a two-day window.

  5. 5

    SRI gains most, but motive does not decide the case.

    SRI was attacked in public twice in the ten days before its release and has had an interim director since 2023. Every actor has a motive, and the timing also matches the third warrant, so the beneficiary test explains how the story was packaged and cannot decide whether it is true. Leading account: a real Russia-linked arson oversold as an attack on the arms plant, 42%. Confidence: low.

Subjects covered

  • Carfil
  • CN ROMARM
  • SRI
  • DIICOT
  • Russian sabotage in Europe
  • Brașov
  • Analysis of Competing Hypotheses
  • Romania

The full report, with its sources and the limits of the analysis, is below. No form.