Estonia to close all Russia border crossings after Threod Systems sabotage bid

Estonia will shut all road border crossings with Russia starting Dec. 1 after authorities detained eight people overnight in connection with a suspected sabotage attempt on the Threod facility in Viimsi near Tallinn, that Estonian authorities say was ordered by Russia’s GRU.

The incident occurred at about 3 AM on Saturday at the Threod facility in Viimsi near Tallinn. The assailants planned to smash windows, pour flammable liquids into the building, blow it up and set it on fire. Threod’s security team stopped the attack before anyone was hurt, and the company’s production and delivery capabilities were unaffected. “Extensive damage was averted thanks to heightened security measures and a swift reaction by law enforcement.” — Kristen Michal.

Prosecutors have applied to have five of the eight people detained overnight in connection with the suspected sabotage attempt on the Threod facility in Viimsi near Tallinn remanded in custody.

Kapo director general Margo Palloson said counter-intelligence indicated Russia was behind the operation and that the GRU coordinated it. Prosecutor general Astrid Asi said preliminary evidence indicated the suspects were hired to carry out the attack and travelled to Estonia for that purpose. Latvia’s security service said its intelligence led to a coordinated operation with Estonia, and searches at nine Latvian locations uncovered explosives, pyrotechnics, ammunition, mobile phones and data storage devices. Investigators are examining the organisation of the operation, each suspect’s role and possible links to others, with Latvian security officials and prosecutors assisting.

Palloson said the GRU recruits people living in the EU who can move freely across the Schengen area, targeting candidates in criminal networks and among people dealing with money or social problems. Several European intelligence services have warned of potential attacks against defence companies and of growing Russian efforts to recruit citizens in EU and NATO countries on online messaging platforms for sabotage.

This is the second suspected Russian attack on an Estonian defence company, after an August arson attack on Milrem Robotics. In September, Kapo said it was confident the Milrem attack was a deliberate pre-planned operation carried out by Russian special services. Kapo said the Milrem attack fits a pattern of Russian attacks on defence and drone companies, particularly those tied to Ukraine. Over the Milrem attack, Estonia summoned Russia’s chargé d’affaires, while the Kremlin denied any link, calling the accusation baseless, ill-considered and unrelated to reality.

Prime minister Kristen Michal said the closure is necessary to lower the risk of additional attacks and that attacks on Estonia’s defence industry and defence capabilities are unacceptable. Michal said Russia wants Estonia to feel afraid, hesitate and reduce its support for Ukraine. He said Estonia will boost security, cooperate with businesses and allies, step up pressure on Russia and keep backing Ukraine. “Russia’s aim is to make us afraid, make us hesitate and weaken our support for Ukraine.” — Kristen Michal.

Tsahkna said hostile actions against Estonia will have consequences and that attempts to intimidate, destabilise or undermine security will not go unanswered. He said shutting the border crossings would weaken Russia’s capacity for hostile operations in Estonia and limit ways to evade sanctions. Tsahkna said he informed his counterparts in Finland, Latvia and Lithuania about the planned closures and plans to push for greater pressure on Russia during Monday’s Brussels meeting of EU foreign ministers.

Michal convened the government’s security cabinet for a Friday meeting to examine the incident, assess Russia’s sabotage threat and decide on next steps. He said security agencies warned the defence industry of potential risks both before and after the Milrem attack, and that preparedness paid off because Threod followed the security advice.

Threod builds long-range attack and reconnaissance drones, and its technology supports British military drone programmes. Threod’s Cata B launcher backed the Royal Navy’s initial strike drone launches from HMS Queen Elizabeth during October North Atlantic trials.

British-made Nyan Maritime drones from Callen-Lenz in Wiltshire were tested together with F-35B jets. The UK Ministry of Defence selected Threod’s Cata launcher for Asgard, the British Army’s one-way attack drone programme, and an almost £5 million contract for the programme is being prepared following trials in 2025. Interchangeable adapters allow the launcher to fire different drone types from a single platform.

The country currently operates three road crossings with Russia — Narva, Luhamaa and Koidula — each of which handles pedestrians and freight. Once all three crossings close on Dec. 1, pedestrians and freight will no longer pass through official points, and authorities have not released details of any exceptions. Travelers and freight operators have until Dec. 1 before the shutdown takes effect. Estonia has not indicated when the crossings might reopen or how long the shutdown will continue.

Moscow has not immediately commented on Estonia’s accusations or the closure of the crossings, and Moscow regularly denies European accusations of involvement in sabotage. Urmas Paet, an Estonian member of the European Parliament, urged a coordinated European response, demanding more support for Ukraine, new sanctions, the use of frozen Russian assets for Ukraine and curbs on visas and border crossings.

Estonia is a member of NATO and the European Union and a strong supporter of Ukraine. Estonian officials say operations against defence companies aim to intimidate businesses and disrupt production and technological development, and they also seek to block deliveries of military equipment and technology to Ukraine.