Signal
Submitted
Feb 1, 2026, 00:14 UTC
Lithuanian authorities uncovered a network responsible for sending incendiary devices hidden in massage cushions and cosmetic tubes via courier services to EU countries and the UK in July 2024, allegedly orchestrated by the Russian intelligence service.
In July 2024, Lithuanian justice authorities exposed a network of individuals accused of planning and organizing arson attacks across several European countries, sending parcels containing homemade incendiary devices with timers concealed in massage cushions and cosmetic tubes. The parcels were dispatched by a Lithuanian national on July 19, 2024, with two shipments sent by DHL cargo planes from Vilnius to the UK, and two others transported by DPD trucks to Poland. One parcel caught fire at the DHL logistics center in Leipzig, Germany, while another detonated in a DPD truck in Poland and a third exploded in a DHL warehouse in Birmingham, UK. A fourth package failed to ignite due to a technical fault. Investigations revealed that Russian citizens with ties to Russian military intelligence coordinated the attacks. A total of 15 suspects are being investigated, with international arrest warrants issued for three individuals. Authorities conducted over 30 searches in Lithuania, Poland, Latvia, and Estonia and uncovered additional incendiary devices during these operations.
Confidence: High
The article clearly attributes the incendiary package attacks to a network linked to Russian military intelligence attempting sabotage in multiple European countries, constituting an aggressor event. There is no mention of defensive or preparatory measures by alliance members in this article.
Source URL
https://tagesschau.de/ausland/litauen-dhl-brandsatz-verdacht-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "5ee3718b-0d23-4098-9adf-25a5b13eeeef",
"url": "https://tagesschau.de/ausland/litauen-dhl-brandsatz-verdacht-100.html",
"source": "extension",
"status": "approved",
"category": "Terrorism & Criminal Proxy Tactics",
"subcategory": "Terrorism",
"incident_type": "Bomb threats, assassination plots, targeted killings",
"country": "Lithuania",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"Lithuania",
"Russia",
"Sabotage",
"Incendiary devices",
"Parcel bombs",
"VLADIMIR military intelligence",
"DHL",
"DPD",
"European Union",
"United Kingdom",
"Arson",
"Counterterrorism"
],
"nodes": [
"Node 1: Borders"
],
"countries": [],
"where_text": "Land",
"headline": "Lithuanian authorities detain suspects over incendiary devices sent via parcels",
"description": "Lithuanian authorities exposed a network sending incendiary devices hidden in ordinary-looking parcels sent to other EU countries and the UK. The parcels contained homemade incendiary devices with timers, disguised inside massage cushions and cosmetic tubes. The packages were sent on 19 July 2024 by a Lithuanian citizen via DHL to the UK and via DPD to Poland. One parcel caught fire in the DHL logistics center in Leipzig, another detonated in a DPD truck in Poland, a third exploded in a DHL warehouse in Birmingham, and the fourth failed due to technical issues. Investigations revealed coordination by Russian nationals linked to Russian military intelligence. Fifteen suspects are accused, and international arrest warrants were issued for three. Over 30 searches were conducted in Lithuania, Poland, Latvia, and Estonia, where further incendiary devices were found.",
"summary_short": "Lithuanian authorities uncovered a network responsible for sending incendiary devices hidden in massage cushions and cosmetic tubes via courier services to EU countries and the UK in July 2024, allegedly orchestrated by the Russian intelligence service.",
"summary_extended": "In July 2024, Lithuanian justice authorities exposed a network of individuals accused of planning and organizing arson attacks across several European countries, sending parcels containing homemade incendiary devices with timers concealed in massage cushions and cosmetic tubes. The parcels were dispatched by a Lithuanian national on July 19, 2024, with two shipments sent by DHL cargo planes from Vilnius to the UK, and two others transported by DPD trucks to Poland. One parcel caught fire at the DHL logistics center in Leipzig, Germany, while another detonated in a DPD truck in Poland and a third exploded in a DHL warehouse in Birmingham, UK. A fourth package failed to ignite due to a technical fault. Investigations revealed that Russian citizens with ties to Russian military intelligence coordinated the attacks. A total of 15 suspects are being investigated, with international arrest warrants issued for three individuals. Authorities conducted over 30 searches in Lithuania, Poland, Latvia, and Estonia and uncovered additional incendiary devices during these operations.",
"actor_primary": "15 individuals under investigation; three with international arrest warrants",
"target_primary": null,
"location_text": "Vilnius (origin of parcels), Leipzig (DHL logistics center, Germany), Poland (DPD truck), Birmingham (DHL warehouse, UK)",
"location_region": null,
"location_coordinates_lat": 55.169438,
"location_coordinates_lon": 23.881275,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article clearly attributes the incendiary package attacks to a network linked to Russian military intelligence attempting sabotage in multiple European countries, constituting an aggressor event. There is no mention of defensive or preparatory measures by alliance members in this article.",
"event_time_utc": "2024-07-19T00:00:00.000Z",
"end_time_utc": "2024-07-22T00:00:00.000Z",
"event_time_confidence": "pm24h",
"created_at": "2026-02-01T00:14:34.286Z",
"updated_at": "2026-11-08T23:50:08.870Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Jul 19, 2024, 00:00 UTC
End time
Jul 22, 2024, 00:00 UTC
Event time confidence
pm24h
Location
Vilnius (origin of parcels), Leipzig (DHL logistics center, Germany), Poland (DPD truck), Birmingham (DHL warehouse, UK)
Primary actor
15 individuals under investigation; three with international arrest warrants
Country
Lithuania
Tags
Lithuania, Russia, Sabotage, Incendiary devices, Parcel bombs, VLADIMIR military intelligence, DHL, DPD, European Union, United Kingdom, Arson, Counterterrorism
Nodes
Node 1: Borders
Signal
Submitted
Feb 1, 2026, 00:14 UTC
Lithuanian authorities uncovered a network responsible for sending incendiary devices hidden in massage cushions and cosmetic tubes via courier services to EU countries and the UK in July 2024, allegedly orchestrated by the Russian intelligence service.
In July 2024, Lithuanian justice authorities exposed a network of individuals accused of planning and organizing arson attacks across several European countries, sending parcels containing homemade incendiary devices with timers concealed in massage cushions and cosmetic tubes. The parcels were dispatched by a Lithuanian national on July 19, 2024, with two shipments sent by DHL cargo planes from Vilnius to the UK, and two others transported by DPD trucks to Poland. One parcel caught fire at the DHL logistics center in Leipzig, Germany, while another detonated in a DPD truck in Poland and a third exploded in a DHL warehouse in Birmingham, UK. A fourth package failed to ignite due to a technical fault. Investigations revealed that Russian citizens with ties to Russian military intelligence coordinated the attacks. A total of 15 suspects are being investigated, with international arrest warrants issued for three individuals. Authorities conducted over 30 searches in Lithuania, Poland, Latvia, and Estonia and uncovered additional incendiary devices during these operations.
Confidence: High
The article clearly attributes the incendiary package attacks to a network linked to Russian military intelligence attempting sabotage in multiple European countries, constituting an aggressor event. There is no mention of defensive or preparatory measures by alliance members in this article.
Source URL
https://tagesschau.de/ausland/litauen-dhl-brandsatz-verdacht-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "5ee3718b-0d23-4098-9adf-25a5b13eeeef",
"url": "https://tagesschau.de/ausland/litauen-dhl-brandsatz-verdacht-100.html",
"source": "extension",
"status": "approved",
"category": "Terrorism & Criminal Proxy Tactics",
"subcategory": "Terrorism",
"incident_type": "Bomb threats, assassination plots, targeted killings",
"country": "Lithuania",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"Lithuania",
"Russia",
"Sabotage",
"Incendiary devices",
"Parcel bombs",
"VLADIMIR military intelligence",
"DHL",
"DPD",
"European Union",
"United Kingdom",
"Arson",
"Counterterrorism"
],
"nodes": [
"Node 1: Borders"
],
"countries": [],
"where_text": "Land",
"headline": "Lithuanian authorities detain suspects over incendiary devices sent via parcels",
"description": "Lithuanian authorities exposed a network sending incendiary devices hidden in ordinary-looking parcels sent to other EU countries and the UK. The parcels contained homemade incendiary devices with timers, disguised inside massage cushions and cosmetic tubes. The packages were sent on 19 July 2024 by a Lithuanian citizen via DHL to the UK and via DPD to Poland. One parcel caught fire in the DHL logistics center in Leipzig, another detonated in a DPD truck in Poland, a third exploded in a DHL warehouse in Birmingham, and the fourth failed due to technical issues. Investigations revealed coordination by Russian nationals linked to Russian military intelligence. Fifteen suspects are accused, and international arrest warrants were issued for three. Over 30 searches were conducted in Lithuania, Poland, Latvia, and Estonia, where further incendiary devices were found.",
"summary_short": "Lithuanian authorities uncovered a network responsible for sending incendiary devices hidden in massage cushions and cosmetic tubes via courier services to EU countries and the UK in July 2024, allegedly orchestrated by the Russian intelligence service.",
"summary_extended": "In July 2024, Lithuanian justice authorities exposed a network of individuals accused of planning and organizing arson attacks across several European countries, sending parcels containing homemade incendiary devices with timers concealed in massage cushions and cosmetic tubes. The parcels were dispatched by a Lithuanian national on July 19, 2024, with two shipments sent by DHL cargo planes from Vilnius to the UK, and two others transported by DPD trucks to Poland. One parcel caught fire at the DHL logistics center in Leipzig, Germany, while another detonated in a DPD truck in Poland and a third exploded in a DHL warehouse in Birmingham, UK. A fourth package failed to ignite due to a technical fault. Investigations revealed that Russian citizens with ties to Russian military intelligence coordinated the attacks. A total of 15 suspects are being investigated, with international arrest warrants issued for three individuals. Authorities conducted over 30 searches in Lithuania, Poland, Latvia, and Estonia and uncovered additional incendiary devices during these operations.",
"actor_primary": "15 individuals under investigation; three with international arrest warrants",
"target_primary": null,
"location_text": "Vilnius (origin of parcels), Leipzig (DHL logistics center, Germany), Poland (DPD truck), Birmingham (DHL warehouse, UK)",
"location_region": null,
"location_coordinates_lat": 55.169438,
"location_coordinates_lon": 23.881275,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article clearly attributes the incendiary package attacks to a network linked to Russian military intelligence attempting sabotage in multiple European countries, constituting an aggressor event. There is no mention of defensive or preparatory measures by alliance members in this article.",
"event_time_utc": "2024-07-19T00:00:00.000Z",
"end_time_utc": "2024-07-22T00:00:00.000Z",
"event_time_confidence": "pm24h",
"created_at": "2026-02-01T00:14:34.286Z",
"updated_at": "2026-11-08T23:50:08.870Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Jul 19, 2024, 00:00 UTC
End time
Jul 22, 2024, 00:00 UTC
Event time confidence
pm24h
Location
Vilnius (origin of parcels), Leipzig (DHL logistics center, Germany), Poland (DPD truck), Birmingham (DHL warehouse, UK)
Primary actor
15 individuals under investigation; three with international arrest warrants
Country
Lithuania
Tags
Lithuania, Russia, Sabotage, Incendiary devices, Parcel bombs, VLADIMIR military intelligence, DHL, DPD, European Union, United Kingdom, Arson, Counterterrorism
Nodes
Node 1: Borders