{
  "id": "0402abeb-3267-44f7-aca2-64c29db39a8d",
  "url": "https://archive.is/s9y47",
  "source": "extension",
  "status": "approved",
  "category": "Military & Paramilitary Operations",
  "subcategory": "Unconventional / Paramilitary",
  "incident_type": "Use of 'little green men' (unmarked soldiers)",
  "country": "Poland",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "russian intelligence operations",
    "sabotage",
    "Poland",
    "railway infrastructure",
    "hybrid warfare",
    "Ukraine aid routes",
    "state-sponsored terrorism",
    "GRU",
    "russia–ukraine war"
  ],
  "nodes": [
    "Node 1: Borders",
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Land",
  "headline": null,
  "description": "On November 16, 2023, a major sabotage incident occurred near Warsaw, Poland, where an explosive device destroyed a railway track used to transport passengers and Western aid to Ukraine. Polish Prime Minister Donald Tusk identified two Ukrainians working for Russian intelligence as responsible, stating this was likely the most serious sabotage act since the start of Russia's full-scale invasion in 2022. The EU's foreign policy chief, Kaja Kallas, labeled the act state-sponsored terrorism. This event is representative of Russia's ongoing hybrid warfare targeting Ukraine supporters, including acts of sabotage, cyberattacks on infrastructure, political interference through disinformation and election meddling, airspace violations in Nordic countries, and migrant weaponization at borders, illustrating a broad toolbox of hybrid tactics by Russian intelligence and affiliated proxy actors across multiple domains.",
  "summary_short": "On 16 November 2023, an explosive device destroyed a railway track near Warsaw, Poland; Polish PM attributed sabotage to two Ukrainians working for Russian intelligence.",
  "summary_extended": "On November 16, 2023, an explosive device detonated on a railway track approximately 100 kilometers from Warsaw, Poland, damaging the line used daily for passengers and Western aid heading to Ukraine. Polish Prime Minister Donald Tusk attributed the act to two Ukrainians working for Russian intelligence, labeling it probably the most serious sabotage act in Poland since Russia's 2022 full-scale invasion of Ukraine. The European Union's top foreign policy official, Kaja Kallas, called the explosion an act of state-sponsored terrorism. This incident is part of a broader Russian hybrid warfare strategy targeting allies of Ukraine, involving sabotage, cyberattacks, disinformation, and airspace violations. Other examples include sabotage of subsea infrastructure in the Baltic Sea, political interference in Eastern European elections, airspace incursions in Nordic countries, extensive cyberattacks across Europe, and weaponization of migrants at borders, all demonstrating Russia's multi-domain hybrid approach.",
  "actor_primary": "Russian intelligence",
  "target_primary": null,
  "location_text": "railway track about 100 km from Warsaw, Poland",
  "location_region": null,
  "location_coordinates_lat": 52.2297,
  "location_coordinates_lon": 21.0122,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly describes a specific sabotage incident near Warsaw attributed by Polish authorities to agents of Russian intelligence, a direct act of hybrid warfare against an ally of Ukraine.",
  "event_time_utc": "2023-11-16T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "exact",
  "created_at": "2026-02-14T12:22:48.390Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "exact",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "0402abeb-3267-44f7-aca2-64c29db39a8d",
  "url": "https://archive.is/s9y47",
  "source": "extension",
  "status": "approved",
  "category": "Military & Paramilitary Operations",
  "subcategory": "Unconventional / Paramilitary",
  "incident_type": "Use of 'little green men' (unmarked soldiers)",
  "country": "Poland",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "russian intelligence operations",
    "sabotage",
    "Poland",
    "railway infrastructure",
    "hybrid warfare",
    "Ukraine aid routes",
    "state-sponsored terrorism",
    "GRU",
    "russia–ukraine war"
  ],
  "nodes": [
    "Node 1: Borders",
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Land",
  "headline": null,
  "description": "On November 16, 2023, a major sabotage incident occurred near Warsaw, Poland, where an explosive device destroyed a railway track used to transport passengers and Western aid to Ukraine. Polish Prime Minister Donald Tusk identified two Ukrainians working for Russian intelligence as responsible, stating this was likely the most serious sabotage act since the start of Russia's full-scale invasion in 2022. The EU's foreign policy chief, Kaja Kallas, labeled the act state-sponsored terrorism. This event is representative of Russia's ongoing hybrid warfare targeting Ukraine supporters, including acts of sabotage, cyberattacks on infrastructure, political interference through disinformation and election meddling, airspace violations in Nordic countries, and migrant weaponization at borders, illustrating a broad toolbox of hybrid tactics by Russian intelligence and affiliated proxy actors across multiple domains.",
  "summary_short": "On 16 November 2023, an explosive device destroyed a railway track near Warsaw, Poland; Polish PM attributed sabotage to two Ukrainians working for Russian intelligence.",
  "summary_extended": "On November 16, 2023, an explosive device detonated on a railway track approximately 100 kilometers from Warsaw, Poland, damaging the line used daily for passengers and Western aid heading to Ukraine. Polish Prime Minister Donald Tusk attributed the act to two Ukrainians working for Russian intelligence, labeling it probably the most serious sabotage act in Poland since Russia's 2022 full-scale invasion of Ukraine. The European Union's top foreign policy official, Kaja Kallas, called the explosion an act of state-sponsored terrorism. This incident is part of a broader Russian hybrid warfare strategy targeting allies of Ukraine, involving sabotage, cyberattacks, disinformation, and airspace violations. Other examples include sabotage of subsea infrastructure in the Baltic Sea, political interference in Eastern European elections, airspace incursions in Nordic countries, extensive cyberattacks across Europe, and weaponization of migrants at borders, all demonstrating Russia's multi-domain hybrid approach.",
  "actor_primary": "Russian intelligence",
  "target_primary": null,
  "location_text": "railway track about 100 km from Warsaw, Poland",
  "location_region": null,
  "location_coordinates_lat": 52.2297,
  "location_coordinates_lon": 21.0122,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly describes a specific sabotage incident near Warsaw attributed by Polish authorities to agents of Russian intelligence, a direct act of hybrid warfare against an ally of Ukraine.",
  "event_time_utc": "2023-11-16T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "exact",
  "created_at": "2026-02-14T12:22:48.390Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "exact",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}