# Estonia Told Parliament Ukraine Shell Deals Posed No Budget Risk. Its Auditor Found €71.6m in Disputed Advances.

Published: 2026-10-31

Factrail documented investigation | Tallinn / Brussels | 31 October 2026

The finding. Estonia was authorised to broker foreign-financed military supplies for Ukraine on an explicit assurance to its parliament that the arrangement would not expose the Estonian state budget to risk. Its own National Audit Office now says the state did assume unbudgeted obligations. In an August 2026 examination, auditors identified €72.1 million of supplier prepayments, of which €71.6 million were disputed because goods had not been received as contracted; €59.8 million was attributed to the most problematic supplier, identified in subsequent reporting as Italy-registered Datasel. These are overlapping accounting categories, not three losses to be added together. The audit establishes a control and disclosure failure, not that €71.6 million has been finally lost, that any minister personally pocketed money, or that a supplier committed a crime. The question that survives the political resignation is narrower and more consequential: who approved continued exposure after warning signs, and who ultimately has to repay the donors if recovery fails? [Estonia's National Audit Office, 31 August 2026](https://www.riigikontroll.ee/en/news/ongoing-disorder-within-remit-ministry-defence-increases-risk-misuse-state-assets).

## The public promise and the private risk

The legal mechanism began with Estonia acting as an intermediary for equipment intended for other countries, especially Ukraine, rather than simply buying for its own armed forces. The National Audit Office says the 2024 and 2025 State Budget Acts permitted the Ministry of Defence to intermediate money for defence equipment and supplies within EU defence cooperation. Crucially, the permission was given on the ministry's assurance to the Riigikogu that the state budget would not assume risks and that the ministry's budget would not be used for the intermediation. That is a parliamentary authorisation with a stated condition, not a finding that every subsequent transaction was automatically lawful or automatically unlawful.

The audit then reached the opposite practical conclusion: contracts managed by the Estonian Centre for Defence Investments, known as RKIK, had created obligations and risks that were not recognised in the state budget. The watchdog warned that costs in the region of €70 million might have to be covered from Estonia's own budget, potentially displacing other expenditure. A contingent exposure is not yet a final taxpayer loss. But a government cannot honestly treat a potentially enforceable liability as nonexistent merely because the original financing arrived from international partners. The relevant distinction is between the source of the initial cash and the person or institution contractually responsible when the promised goods fail to arrive. [National Audit Office audit release](https://www.riigikontroll.ee/en/news/ongoing-disorder-within-remit-ministry-defence-increases-risk-misuse-state-assets).

The money was part of a wider pipeline. The auditor reports that the Ministry of Defence received €531.9 million in intermediation-grant prepayments in 2024 and €138.4 million in 2025. Those larger amounts are not reported to have disappeared and must not be described as disputed Datasel payments. They matter because the disputed contracts were embedded in a much bigger system that required documentation of delivery, prepayment, foreign donor conditions and the state's possible repayment obligations.

## Four contracts, two early advances, then more exposure

The sequence reported by Estonian public broadcaster ERR begins in August 2024, when RKIK signed a contract with Datasel S.R.L., registered in Italy, and transferred approximately €15 million. In October, a second contract was signed with a further advance of more than €10 million. The first deliveries were expected by November 2024. ERR reports delays and difficulties, followed by two additional contracts late in the year and further advance payments. The often-repeated figure of roughly €70 million describes the approximate overall deal or advance exposure in reporting; the audit's €59.8 million is the more precise figure it assigned to the single most problematic supplier. Those are not interchangeable measurements. [ERR's initial contract chronology](https://news.err.ee/1610125852/estonia-takes-defense-firm-to-court-over-70-million-contract-for-shells-for-ukraine).

This timing creates the decision test. Were the later contracts signed before RKIK received credible warnings about production or delivery? Did the original two agreements have safeguards allowing suspension of further advances? Which official saw the inspection results, and which person approved the subsequent transfers? A payment chronology can show that the state increased exposure; it cannot by itself show a minister's information or intent. The contracts, bank transfers, minutes and procurement risk memoranda would be needed to answer that more serious allegation.

The supplier's reported commercial structure makes the selection question unusually important. Datasel had been acquired in 2024 by Neco Defence Munitions Private Limited, an India-linked company. Media accounts raised questions about whether the businesses had previously manufactured or sold artillery shells. Yet a lack of an earlier public sales record is not proof that a company could never build a supply chain, subcontract production or fulfill a contract. The proper test is the evidence of actual capacity and enforceable guarantees that the buyer had when it committed public money. ERR reported that former RKIK director Magnus-Valdemar Saar described visits to facilities in India and Italy before and during performance; Datasel's lawyer also said Estonian officials inspected capacity and deliveries. The full contemporaneous inspection reports have not been independently examined for this article. [ERR's reconstruction and both sides' responses](https://news.err.ee/1610130736/estonian-agency-fails-to-demonstrate-how-70-million-unsuccessful-ammo-contract-reached).

## What the auditor actually counted

The August audit is unusually precise about the denominator. It reports €72.1 million in supplier prepayments for intermediated support, €71.6 million affected by disputes over undelivered goods, and €59.8 million paid to the supplier presenting the largest problem. Reproducible arithmetic puts the disputed portion at approximately 99.3% of the €72.1 million prepayment pool and the largest supplier's advances at approximately 83.5% of the €71.6 million disputed amount. These ratios describe the audit's examined pool, not all Estonian defence contracts, all Ukraine aid, or money finally unrecoverable. [Auditor's published figures](https://www.riigikontroll.ee/en/news/ongoing-disorder-within-remit-ministry-defence-increases-risk-misuse-state-assets).

| Figure | What it measures | What it does not establish |
| --- | --- | --- |
| €72.1m | Supplier prepayments examined for intermediated support | Total national military aid or a established loss |
| €71.6m | Prepayments subject to disputes over undelivered goods | A final judgment that every euro is unrecoverable |
| €59.8m | Advances to the largest problematic supplier | All €71.6m, or the supplier's profit |
| About €70m | Auditor's estimated possible national-budget exposure and rounded press shorthand | An amount already charged to Estonian taxpayers |
| €14.5m | Reported potentially returnable funds from two donor states | An additional amount to add to the disputed advances |

The final line comes from a separate October 5 report. ERR, citing Postimees, said Denmark and the Netherlands could seek return of a combined €14.5 million connected with unsuccessful ammunition advances. It identified a reported €9.5 million Danish component and €5 million Dutch component, while noting that Estonia's Defence Ministry disputed Dutch involvement in the Datasel transaction and the Dutch ministry confirmed funding and return provisions more generally. These details are not independently reconciled against the bilateral agreements. They describe potential donor repayment within the underlying financing, not a new €14.5 million loss on top of the audit's disputed advances. The donor identities and precise contract allocation require further documentary proof. [ERR on donor repayment exposure, 5 October](https://news.err.ee/1610156518/donor-countries-may-demand-back-14-5-million-over-failed-ammo-deals).

The watchdog's larger findings also matter, but must be kept in their own accounting compartments. It qualified its opinion concerning a €1.2 billion defence-inventory balance because the records could not reliably establish which assets and quantities were included. It described a retrospective €99.7 million inventory adjustment without adequate underlying documentation and more than 60,000 asset units worth approximately €300 million not recognised promptly. Those are accounting and control findings, not evidence that €1.2 billion, €300 million or €99.7 million was stolen. The auditor otherwise found the state's 2025 financial statements fairly presented in material respects apart from the qualified inventory issue, and it did not overturn its overall regularity assessment of state financial transactions. [National Audit Office's qualified assessment](https://www.riigikontroll.ee/en/news/ongoing-disorder-within-remit-ministry-defence-increases-risk-misuse-state-assets).

## The missing decision record is the political centre of the case

The strongest unresolved evidence concerns the route by which Datasel reached RKIK and the timing of warnings. On September 16, the Riigikogu's Anti-Corruption Select Committee announced an on-site examination of procurement files, ministerial meeting materials, correspondence and inspection memoranda. Chair Anastassia Kovalenko-Kõlvart said the committee had received contradictory accounts of who first contacted Datasel, who communicated with the firm and how much the political leadership knew. She sought a purported early-2025 RKIK proposal to halt this form of ammunition brokerage and return funds not yet committed. The statement described former RKIK chief Saar's allegation that the then-defence minister rejected that proposal. The committee's demand for a document is not equivalent to this article having inspected the document or proved the minister rejected it. [Riigikogu committee announcement, 16 September](https://www.riigikogu.ee/pressiteated/anastassia-kovalenko-kolvart-korruptsioonivastane-erikomisjon-laheb-rkik-i-dokumentidega-tutvuma/).

Five days later, after committee members visited RKIK, the chair reported that documents seen there indicated the ministry had been warned of risks and had permitted risks to be taken, and that RKIK had proposed in autumn 2024 not to enter additional brokerage contracts in the same form. This is a materially earlier warning than the separate reported 2025 proposal. It is also a claim from a parliamentary committee chair about documents she reviewed, not a publicly reproduced, independently authenticated full ministerial decision minute. The distinction matters: a warning about the overall brokerage model is not automatically proof that a particular politician directed the four Datasel payments. [Riigikogu statement, 21 September](https://www.riigikogu.ee/pressiteated/erikomisjon-jatkab-avalikul-istungil-kaitsevaldkonna-korruptsiooniohtude-uurimist/).

Former ministry permanent secretary Kusti Salm offered a more personal account. He told ERR that contact with Datasel came through then-defence minister Hanno Pevkur and described the minister as hands-on in the Ukraine procurement programme. Former RKIK chief Saar also reported direct ministerial involvement in specific opportunities and pressure over the speed of a payment. Pevkur disputed the account of originating the Datasel contact. Then-permanent secretary Kaimo Kuusk told a parliamentary hearing that offers commonly reached officials and ministers, that forwarding an offer did not amount to approving it, and that RKIK was responsible for evaluating suppliers and risks. Kuusk said he could not confirm the reported pressure and disputed whether a stop-brokerage proposal had actually been submitted in the form claimed. These are genuine conflicting witness accounts, not findings a court has resolved. [ERR on Salm's account](https://news.err.ee/1610140420/former-mod-permanent-secretary-datasel-contract-followed-10-months-of-preparations); [ERR on the ministry's rebuttal](https://news.err.ee/1610137996/estonian-mod-rejects-agency-s-claim-it-proposed-terminating-epf-ammo-brokerage-in-2025).

The crucial documentary question therefore has at least three levels. First, who introduced a commercial lead? Second, who approved due diligence, contract signature and prepayment? Third, who authorised continuing the programme after risk warnings and represented its fiscal exposure to Parliament? The same person need not have held all three powers. Collapsing them into a claim that the minister personally awarded the contract would outrun the inspected evidence.

## The actual authority map

Parliament authorised the intermediation through the budget framework and retained scrutiny over the financial risk disclosed to it. The Defence Ministry set the political programme, supervised its agencies and was responsible for the representations accompanying the budget. The RKIK procurement agency negotiated, documented, signed and administered supplier contracts; its director general was the operational signatory according to current RKIK management. The Defence Forces and associated inspectors had roles in evaluating and receiving materiel, but inspection does not necessarily transfer legal ownership or establish contractual acceptance. The National Audit Office audits financial regularity and can identify deficiencies; it does not adjudicate a supplier's breach or convict an official. Courts and arbitration bodies determine the parties' disputed contractual rights. Donor governments and EU financing authorities can assess eligibility and possible recovery under their own funding arrangements. [RKIK management's explanation reported by ERR](https://news.err.ee/1610130736/estonian-agency-fails-to-demonstrate-how-70-million-unsuccessful-ammo-contract-reached).

Pevkur resigned on September 2, 2026, saying he accepted political responsibility for his department's failures while maintaining that a minister does not personally negotiate individual ammunition contracts. Prime Minister [Kristen Michal](/people/kristen-michal) said political responsibility did not necessarily mean the minister had been personally at fault. The resignation changes who answers to Parliament but does not recover a prepayment, establish the chain of signatures, resolve arbitration or correct an accounting record. [ERR's resignation report](https://news.err.ee/1610126620/estonia-s-defense-minister-resigns-in-national-defense-procurement-scandal); [Euronews' independent coverage](https://www.euronews.com/2026/09/03/estonian-defence-minister-resigns-in-70m-eu-funded-procurement-scandal-for-ukraine).

## Who received the money, and who actually benefited?

The identifiable direct commercial recipient is Datasel, through advances reported by the auditor and news investigations. Receiving an advance can provide working capital, liquidity and a contractual opportunity, but it does not prove the company retained the funds, earned a margin or distributed money to an individual shareholder. Those outcomes require its bank records, subcontractor payments, inventory and consolidated accounts. The buyer, Estonia, acquired contractual claims to performance or repayment; Ukraine was the intended military beneficiary but reportedly received no usable ammunition from these disputed contracts. That is a failure of the intended delivery route, not proof that Estonia's broader Ukraine aid was ineffective.

The ownership chain needs particular care. In a September 4 stock-exchange communication, India's listed Jayaswal Neco Industries Limited stated that Datasel was a subsidiary of Neco Defence Munitions Private Limited, not of the listed company. It said both entities were linked by a common promoter group, that Anand Jayaswal was the only common director, that the listed company had no transactions with Datasel or Neco Defence Munitions and that the dispute would have no financial effect on its own accounts. This is a primary corporate statement about legal separation, not independent proof of all ultimate beneficial ownership or of the private company's cash flows. Naming Jayaswal Neco Industries as the recipient of Estonia's €59.8 million would therefore be unsupported. [Jayaswal Neco Industries' 4 September stock-exchange disclosure](https://www.necoindia.com/wp-content/uploads/2025/02/pressrelease04092026_Datasel-SRL.pdf).

For Estonia's taxpayers, the potential adverse mechanism is different: if foreign funders invoke repayment clauses before Estonia recovers advances from the supplier, the treasury could face a cash call and then attempt to recover it through litigation. ERR's October report cited possible repayment of €14.5 million to two donors, but the dates, enforceability and precise allocations remain contested or unavailable. Taxpayers have a conditional liability, not a established final charge. For Ukraine, the relevant cost is opportunity: usable shells not delivered when promised, with a military consequence that cannot be honestly converted into a casualty figure or monetary damage without operational evidence. For donors, the issue is whether the assistance was properly used and whether recovery rights can be exercised without interrupting legitimate aid. [ERR on possible donor claims](https://news.err.ee/1610156518/donor-countries-may-demand-back-14-5-million-over-failed-ammo-deals).

## What it means for EU budgets and Ukraine aid

The potential fiscal cost belongs first to the procurement and reimbursement chain, not to a hypothetical automatic EU-wide tax bill. Estonia's audit warns that roughly €70 million could ultimately require cover from its state budget if disputed advances cannot be recovered. That is a contingent exposure, not an audited final loss, and any reimbursement claim by donors would depend on the underlying agreements. National lawmakers should therefore compare recovered cash, outstanding supplier receivables and any actual appropriations or spending reductions before claiming taxpayers have paid. For Western allies, the financing test is distinct from the military one: delays in ammunition deliveries can reduce Ukraine's access to urgently needed supplies even when funds were committed on paper. The European Peace Facility's newly adopted €4.9 billion package on 26 October 2026 largely reimburses earlier member-state deliveries (€4.7 billion) and adds €230 million for military assistance training; it must not be counted as a cash rescue for these disputed contracts. The beneficiaries of proper recovery are Estonia's taxpayers and donor states; the parties bearing the immediate burden of failed procurement are the public authorities managing exposure and Ukraine's intended recipients of undelivered equipment. The contracts and arbitration outcome remain necessary to establish who bears the final cost. [Council of the EU, 26 October 2026](https://www.consilium.europa.eu/en/press/press-releases/2026/10/26/eu-support-for-ukraine-council-mobilises-49-billion-under-the-european-peace-facility/).

The European Peace Facility is an off-EU-budget mechanism financed by participating states and used for military assistance, including Ukraine. Its governance and audit mechanisms are not the same as Estonia's domestic procurement approval chain. The Council's October 26, 2026 announcement of €4.9 billion in additional EPF decisions relates to wider Ukraine support and does not establish that Estonia's disputed Datasel advances were reimbursed, approved or forgiven. Mixing those funding streams would conceal rather than explain the liability. [Council's EPF institutional explanation](https://www.consilium.europa.eu/en/policies/european-peace-facility/); [Council's 26 October decisions](https://www.consilium.europa.eu/mt/press/press-releases/2026/10/26/eu-support-for-ukraine-council-mobilises-49-billion-under-the-european-peace-facility/).

## The strongest defence: urgency, inspections and an unresolved contract dispute

The government's legitimate policy objective was to procure urgently needed artillery ammunition for Ukraine in a market constrained by Russia's war. Pevkur argued that the available suppliers were not necessarily easy or familiar partners and that risk was unavoidable. RKIK's former director Saar described supplier inspections and the involvement of an affiliated publicly traded group in the procurement process. Datasel's lawyer Veiko Viisileht said Estonian officials visited production facilities and checked delivered batches, that the firm did not receive timely quality complaints before termination, and that the company was ready to complete outstanding deliveries. These assertions require fair examination, not dismissal simply because the transaction failed. [ERR's account of inspections and Datasel's response](https://news.err.ee/1610130736/estonian-agency-fails-to-demonstrate-how-70-million-unsuccessful-ammo-contract-reached).

The state's opposing case is also concrete. RKIK's lawyers say the firm repeatedly missed deadlines and that goods examined in Romania did not satisfy contract requirements. The parties dispute whether termination was valid. ERR reports proceedings in an Estonian court and international arbitration in Switzerland, including proceedings under International Chamber of Commerce rules. No final judgment on the merits or quantified recovery is established by the sources inspected here. A pending investigation reported in the media is not a criminal conviction, and this article has not independently obtained a formal EPPO case notice identifying charges against named persons. [ERR on arbitration, 20 September](https://news.err.ee/1610143246/estonia-s-defense-agency-takes-datasel-dispute-to-swiss-arbitration); [ERR on the competing settlement positions](https://news.err.ee/1610139370/defense-agency-rejects-datasel-talks-as-eu-funding-period-ends).

There is an additional practical complication. Datasel proposed renewed talks and said it could finish delivery. RKIK's lawyer Maria Pihlak responded that the relevant financing period had expired, that RKIK lacked current budget resources to accept the claimed remaining ammunition, and that litigation would continue. Even if a supplier can manufacture shells now, that does not automatically cure a breach under an expired funding agreement; conversely, rejecting settlement is not automatically the fiscally optimal choice. The missing evidence is the full contractual schedule, technical inspection findings, financing deadlines, realistic salvage value and litigation costs. [ERR on the rejected working-group proposal](https://news.err.ee/1610139370/defense-agency-rejects-datasel-talks-as-eu-funding-period-ends).

## What would change the verdict

Four records would most sharply change this investigation. First, the original 2024 procurement and payment approval trail, including due diligence and signatory authority, would establish who authorised each advance. Second, the autumn 2024 warning and purported 2025 ministerial meeting minute would settle whether risk was expressly escalated and who decided to continue; public committee statements about seeing documents do not substitute for their text. Third, the donor agreements and detailed reconciliations would identify which government can demand which repayment, by what date, and whether Estonia has already paid. Fourth, court and arbitration orders, independent technical assessments and actual cash recovery would establish whether the supplier breached, what the goods were worth and what money was ultimately lost or returned.

The current verdict is neither that Estonia stole €70 million nor that an urgent wartime deal merely suffered bad luck. The National Audit Office established that the budget-risk assurance and the actual exposure did not match, while the parliamentary committee reported contemporaneous warnings and demanded the missing decision record. That is already a substantial accountability finding. The legal responsibility of named individuals, the validity of the contracts and the final fiscal burden remain open. Until those gaps are closed, a resignation is a political consequence, not a financial audit trail.

## Source trail and editorial method

This article independently compared the National Audit Office's three distinct prepayment figures, reconstructed the decision and veto chain from dated Riigikogu committee statements, checked the supplier group's corporate separation against a stock-exchange disclosure, and tested the government's and supplier's strongest contrary accounts against independent reporting. The documentary backbone is [the Estonian National Audit Office's 31 August 2026 release](https://www.riigikontroll.ee/en/news/ongoing-disorder-within-remit-ministry-defence-increases-risk-misuse-state-assets), [the Riigikogu's 16 September inquiry](https://www.riigikogu.ee/pressiteated/anastassia-kovalenko-kolvart-korruptsioonivastane-erikomisjon-laheb-rkik-i-dokumentidega-tutvuma/), [the committee's 21 September findings statement](https://www.riigikogu.ee/pressiteated/erikomisjon-jatkab-avalikul-istungil-kaitsevaldkonna-korruptsiooniohtude-uurimist/), and [the 4 September corporate disclosure](https://www.necoindia.com/wp-content/uploads/2025/02/pressrelease04092026_Datasel-SRL.pdf). Independent reporting and direct party responses are linked in the sections above. The contracts, classified donor agreements, original ministerial minutes, final arbitration outcomes and full payment chain have not been obtained. No right-of-reply outreach by Factrail is claimed. This is an evidence-bounded documentary comparison, not an accusation of criminal conduct.

## Methodology

https://factrail.ai/methodology

Canonical: https://factrail.ai/articles/estonia-datasel-ukraine-shells-budget-risk-2026