On 15 October 2025 two Ukrainian citizens, who had entered Romania from Poland the day before, lodged at the office of the Ukrainian courier company Nova Post in Sector 3 of Bucharest two parcels containing home-made incendiary devices based on thermite and barium nitrate, with remote initiation and a GPS module, hidden in headphones and car parts. SRI pyrotechnicians disarmed the devices; nothing ignited. On 16 October DIICOT detained the two suspects (aged 21 and 24), and on 21 October SRI announced it had foiled a sabotage operation which it said was directed by the Russian Federation, the two men acting under the direct coordination of representatives of Russian secret services. The office is on the ground floor of a seven-storey block; DIICOT assessed that a fire could have spread to neighbouring buildings.
Responsibility and limits of the evidence
officially attributed
A court or a competent state body has attributed it. That is not the same as a proven attack: an indictment is an allegation, not a verdict.
Named party: Russian secret services (according to SRI and DIICOT)
B - official attribution by a state body
Serviciul Român de Informații (SRI) / 2025-10-21 / carrying out the act
SRI announced it had foiled a "sabotage operation directed by the Russian Federation": the two Ukrainian citizens were said to act "under the direct coordination of representatives of Russian secret services", as part of a saboteur network controlled by those services. That is the agency's position, not a court finding; no individual on the Russian side has been named.
Direcția de Investigare a Infracțiunilor de Criminalitate Organizată și Terorism (DIICOT) / 2026-04-06 / carrying out the act
In the indictment of 2 April 2026 DIICOT charged the two men with attempted sabotage and complicity, maintaining that the operation was directed by the Russian Federation. An indictment is an allegation, not a verdict.
Impact
killed
not established
injured
not established
damage
none
No casualties reported.
Source discrepancy
Malcontent dates the event 20 October 2025; SRI and DIICOT give 15 October for the lodging of the parcels (entry 14.10, detentions 16.10, announcement 21.10). 15 October was adopted.
News.ro gives the suspects' ages as 21 and 24, Agerpres (from the indictment six months later) as 23 and 24. The October version was kept.
What happened next
On 2 April 2026 DIICOT sent the two Ukrainian citizens (aged 23 and 24) to trial at the Bucharest Court of Appeal for attempted sabotage and complicity; expert examination confirmed the devices were functional.