Event 96a8a033-43a8-477a-988c-c2fc98cc7833

Approved event from Hybrid War Tracker

Status: Approved Confidence: Low Classification: Terrorism & Criminal Proxy Tactics > Terrorism > Bomb threats, assassination plots, targeted killings Country: European Union Where: Land Node: Node 1: Borders Node: Node 2: 5th Column Tag: terrorism Tag: arson attacks Tag: foreign intelligence service Tag: hybrid warfare Tag: disinformation Tag: cybercrime Tag: NATO Tag: Ukraine war Tag: criminal prosecution Tag: EU cooperation Tag: Eurojust Tag: Europol Tag: Czech Republic Tag: Lithuania Tag: Poland Tag: Romania Tag: Colombian suspect Aggressor Confidence: High
🕐
Event Time
2d ago
Created
6h ago
✏️
Updated
6h ago

Summary

Short Summary: A terrorist group responsible for arson attacks in Czech Republic, Lithuania, Poland, and Romania, linked to a foreign intelligence service, has been taken to court starting 2026-01-27.

Extended Summary: On 27 January 2026, Eurojust announced that a terrorist group suspected of conducting arson attacks across the European Union on behalf of a foreign intelligence service is being taken to court. The group attempted arson targeting commercial, transport, and factory facilities in the Czech Republic, Lithuania, Poland, and Romania. After joint investigations initiated by Romania and coordinated by Eurojust, trials have already resulted in convictions in Romania and the Czech Republic, with a trial pending in Lithuania for six suspects later in 2026. Notably, suspects targeted a Lithuanian factory producing materials for the Armed Forces of Ukraine and construction depots in Poland with attacks falsely portrayed by Russian-language media as sabotage against NATO infrastructure for disinformation purposes. The investigation revealed coordination among suspects using similar methods to intimidate, fear, and undermine support for Ukraine. The suspect in Poland, a Colombian citizen, committed arson in Warsaw and Radom, and disinformation activities are ongoing. Authorities from Czech Republic, Lithuania, Poland, and Romania collaborated closely with operational and legal support from Eurojust and Europol. Sentences included 6 and 8 years imprisonment and expulsion orders. The case highlights ongoing hybrid threats using terrorism and disinformation to destabilize NATO allies.

Description

A terrorist group suspected of carrying out arson attacks across the European Union on behalf of a foreign intelligence service is being prosecuted. The group targeted commercial, transport, and factory facilities in Czech Republic, Lithuania, Poland, and Romania. Investigations revealed coordinated arson attempts involving spraying petrol and setting fires, targeting strategic sites including a factory producing materials for Ukraine’s Armed Forces. Some attacks failed initially due to insufficient flammable materials, while others succeeded. A Colombian citizen was found responsible for arsons in Poland, later spreading disinformation via Russian-language media falsely framing the incidents as sabotage against NATO military infrastructure. Trials in Romania and Czech Republic have led to convictions; a Lithuanian trial is upcoming. Authorities from the involved countries worked with Eurojust and Europol to coordinate investigations and prosecutions to avoid double jeopardy. Sentences included imprisonment, expulsion, and fines. The case demonstrates hybrid warfare tactics combining terrorism with disinformation to undermine NATO allies and foment fear and distrust towards Ukraine.

Event Classification

Aggressor Event

Rationale

The event describes coordinated terrorist arson attacks linked to a foreign intelligence service (aggressor) targeting EU countries, with direct prosecution and convictions noted. The described actions are hostile hybrid warfare tactics including terrorism and propaganda. No defensive preparations are described.

Evidence

Quotes

A terrorist group suspected of carrying out several arson attacks in the European Union on behalf of a foreign intelligence service is to be taken to court.
Authorities from the Czech Republic, Lithuania, Poland and Romania found links between attempted and actual arson attacks in their respective countries.
In Lithuania, the suspects targeted a factory producing materials for the Armed Forces of Ukraine.
Recordings of these incidents were later disseminated by Russian-language online media, falsely presented as acts of sabotage against NATO military infrastructure for disinformation and propaganda purposes.
The joint investigation team revealed that all these acts were carried out by the same terrorist group, with links to a foreign intelligence service. The group acted with the common objective of intimidating people, fostering fear and distrust, and hindering support for Ukraine in the war.
Subscribe via Weekly Briefs RSS or Approved Events RSS .