Suspected arsonists linked to Russian military intelligence

Those responsible for arson attacks against a businessman in Estonia’s Harju County were also carrying out a task for Russian military intelligence during the same period, ERR News reports in an article published on 5 November 2026. The claim rests on a single source. At the time of publication, Flank has found no independent confirmation of the alleged intelligence link.

The attacks against the businessman

According to ERR, at least four vehicles used by the businessman, a holiday building and a building he owned that housed a tourist centre have been set on fire over the past three years.

It is important to distinguish these attacks from the alleged task for Russian military intelligence. Even if the same individuals were involved in both, this does not prove that Russia commissioned the arson attacks against the businessman.

Local perpetrators and sabotage

ERR quotes Estonian security experts as saying that Russia is stepping up arson and sabotage in Europe and recruiting local perpetrators through social media. The experts warn of a risk of mass casualties, but do not claim that any occurred in the case described. The expansion of the campaign is their assessment; a single report is not enough to establish its scale and pace.

In Flank’s assessment, the key question is whether local criminal networks are also being used to carry out tasks for a foreign state. If such a link is proven, it would show how those commissioning an operation can reach local targets without directly deploying their own personnel. For each individual incident, however, the perpetrator, motive and those who commissioned it must be established.

Questions that remain unanswered

The evidence for the intelligence link, who commissioned the alleged task and what it involved remain unclear. Official investigation findings, court documents and information about communications or payments that could distinguish personal revenge from possible external commissioning will be important in verifying the claims. The investigation is continuing and further information may emerge.