Estonia's defence industry rethinks security after arson attack on Milrem Robotics
After Estonia's Internal Security Service (KaPo) attributed the arson of Milrem Robotics' building to Russian intelligence services, companies and the state are searching for a new balance between transparency and security risks.
Estonia's defence industry has been growing rapidly, but the potential cost of risk is rising alongside it. After an arson attack on a building belonging to military vehicle maker Milrem Robotics in Lasnamäe, companies and state authorities are being forced to reassess how prepared they are for such threats.
According to Estonia's Internal Security Service (KaPo), the Milrem fire was the first successful attack in Estonia this year organized by Russian intelligence services through recruited perpetrators. KaPo director general Margo Palloson said there have been significantly more attempts, most of which were prevented. He noted that Russia tries to recruit a wide range of people — members of Estonia's Russian-speaking community, people linked to organized crime, and foreigners. Last year's arson of the Slava Ukraini restaurant involved perpetrators recruited in Moldova, while in the Milrem case they came from Latvia.
A new type of threat
Palloson stressed that perpetrators may not even know their true client is a Russian intelligence service, creating a new kind of risk — one that can originate not only directly from a state but from an individual recruited online. Security expert Meelis Oidsalu believes Russia uses such attacks to signal readiness for escalation, aiming to show that the defence sectors of countries supporting Ukraine remain vulnerable.
Tormis Saar, head of military technology company GoCraft, said the firm has reviewed where security could be strengthened and what role the state should play, noting that the defence industry ecosystem was built during peacetime.
Debate over data access
The Defence Industry Association is discussing whether to restrict access to certain company data currently available in public registries. Interior Minister Igor Taro expressed doubt that hiding such data would be an effective solution, arguing that investment in infrastructure, surveillance and security is more effective. A GoCraft representative acknowledged that fully concealing company information is practically impossible, but said it is worth reconsidering what data registries should hold in the future.
Oidsalu also pointed out that the state itself is involved in new defence-industry parks and urged officials to consider the safety of locating such vulnerable sites, for example in Ida-Viru County. Experts urge calm, noting that the scale of sabotage attempts so far remains relatively limited.
