{
  "id": "5871cfe8-7f06-40c4-a2f2-dc6c78701b76",
  "url": "https://bbc.com/news/articles/c4gknv8nxlzo",
  "source": "extension",
  "status": "approved",
  "category": "Terrorism & Criminal Proxy Tactics",
  "subcategory": "Terrorism",
  "incident_type": "Bomb threats, assassination plots, targeted killings",
  "country": "Poland",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "rail sabotage",
    "Poland",
    "Russia",
    "Ukraine",
    "russian intelligence operations",
    "hybrid warfare",
    "terrorism",
    "explosive attack",
    "cross-border sabotage",
    "Donald Tusk"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Land",
  "headline": null,
  "description": "Two Ukrainians working for Russia have been identified as suspects behind two sabotage acts on Poland's rail network, according to Polish Prime Minister Donald Tusk. They entered Poland from Belarus and had long worked for Russian intelligence. One attack involved damaging railway infrastructure near Malko on 15 November 2025, causing damage to a freight train and wagons. Another involved placing a steel clamp on rails to derail a train. Russian officials denied involvement. The sabotage aims to disrupt railway links critical for supplying Ukraine during the ongoing war. Polish authorities have detained several suspects and continue investigations.",
  "summary_short": "Polish PM Donald Tusk says two Ukrainians working for Russia were behind sabotage on Poland's rail network in November 2025.",
  "summary_extended": "Polish Prime Minister Donald Tusk revealed that two Ukrainian nationals long employed by Russia were identified as suspects behind two acts of rail sabotage targeting Poland's rail network in November 2025. The men entered Poland from Belarus and had participated in an attack near Malko, southeast of Warsaw, causing significant damage to railway infrastructure. One act involved placing a steel clamp on a rail, and the other was a more destructive bombing on 15 November, damaging a freight train and wagons. Tusk stated the sabotage was ordered by a 'foreign service' likely Russian, intending to create a rail catastrophe and disrupt supplies into Ukraine amid the ongoing conflict. Russian authorities denied involvement, labeling accusations as 'strange.' Poland is a NATO and EU member, highlighting the geopolitical stakes of the incident. The government disclosed that some suspects had been detained, and investigations were ongoing. The Polish PM emphasized the serious security and political implications to Polish society and the risk of destabilization from such covert hostile actions.",
  "actor_primary": "Two Ukrainian citizens who long worked for Russian intelligence",
  "target_primary": null,
  "location_text": "Railway line near Malko, south-east of Warsaw, Poland",
  "location_region": null,
  "location_coordinates_lat": 51.919438,
  "location_coordinates_lon": 19.145136,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly describes hostile sabotage activities attributed to Russian intelligence against Polish railway infrastructure involving Ukrainian agents, constituting a deliberate attack. The Polish government identified suspects and stated the attacks were ordered by foreign services, clearly defining aggressor activity. No defensive or preparatory actions by alliance states are described in this report.",
  "event_time_utc": "2025-11-15T20:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm1h",
  "created_at": "2026-02-01T00:14:33.484Z",
  "updated_at": "2026-11-08T23:57:40.795Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_1h",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "5871cfe8-7f06-40c4-a2f2-dc6c78701b76",
  "url": "https://bbc.com/news/articles/c4gknv8nxlzo",
  "source": "extension",
  "status": "approved",
  "category": "Terrorism & Criminal Proxy Tactics",
  "subcategory": "Terrorism",
  "incident_type": "Bomb threats, assassination plots, targeted killings",
  "country": "Poland",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "rail sabotage",
    "Poland",
    "Russia",
    "Ukraine",
    "russian intelligence operations",
    "hybrid warfare",
    "terrorism",
    "explosive attack",
    "cross-border sabotage",
    "Donald Tusk"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Land",
  "headline": null,
  "description": "Two Ukrainians working for Russia have been identified as suspects behind two sabotage acts on Poland's rail network, according to Polish Prime Minister Donald Tusk. They entered Poland from Belarus and had long worked for Russian intelligence. One attack involved damaging railway infrastructure near Malko on 15 November 2025, causing damage to a freight train and wagons. Another involved placing a steel clamp on rails to derail a train. Russian officials denied involvement. The sabotage aims to disrupt railway links critical for supplying Ukraine during the ongoing war. Polish authorities have detained several suspects and continue investigations.",
  "summary_short": "Polish PM Donald Tusk says two Ukrainians working for Russia were behind sabotage on Poland's rail network in November 2025.",
  "summary_extended": "Polish Prime Minister Donald Tusk revealed that two Ukrainian nationals long employed by Russia were identified as suspects behind two acts of rail sabotage targeting Poland's rail network in November 2025. The men entered Poland from Belarus and had participated in an attack near Malko, southeast of Warsaw, causing significant damage to railway infrastructure. One act involved placing a steel clamp on a rail, and the other was a more destructive bombing on 15 November, damaging a freight train and wagons. Tusk stated the sabotage was ordered by a 'foreign service' likely Russian, intending to create a rail catastrophe and disrupt supplies into Ukraine amid the ongoing conflict. Russian authorities denied involvement, labeling accusations as 'strange.' Poland is a NATO and EU member, highlighting the geopolitical stakes of the incident. The government disclosed that some suspects had been detained, and investigations were ongoing. The Polish PM emphasized the serious security and political implications to Polish society and the risk of destabilization from such covert hostile actions.",
  "actor_primary": "Two Ukrainian citizens who long worked for Russian intelligence",
  "target_primary": null,
  "location_text": "Railway line near Malko, south-east of Warsaw, Poland",
  "location_region": null,
  "location_coordinates_lat": 51.919438,
  "location_coordinates_lon": 19.145136,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly describes hostile sabotage activities attributed to Russian intelligence against Polish railway infrastructure involving Ukrainian agents, constituting a deliberate attack. The Polish government identified suspects and stated the attacks were ordered by foreign services, clearly defining aggressor activity. No defensive or preparatory actions by alliance states are described in this report.",
  "event_time_utc": "2025-11-15T20:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm1h",
  "created_at": "2026-02-01T00:14:33.484Z",
  "updated_at": "2026-11-08T23:57:40.795Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_1h",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}