Russian spies ‘leaked video of arson attack’ on Polish warehouse in bid to frame Ukraine

Cyber & Information WarfareInformation OperationsPropaganda & disinformation campaigns

Aggressor

Summary

In May 2024, Russian-linked Telegram channels leaked footage of a warehouse arson in Radom, Poland, aiming to falsely blame Ukrainians while a Colombian man was charged with sabotage.

In May 2024, Russian spies shared footage on Telegram of an arson attack at a construction warehouse in Radom, Poland, wrongly implicating Ukrainians. The footage appeared hours after the attack but before Polish media reported it. A Colombian national was charged with sabotage for the July 2025 fire and had received Kremlin instructions. The incident is part of a broader Russian disinformation campaign using fake accounts to fuel anti-Ukrainian sentiment and support sabotage operations across Europe. The suspect also carried out another arson in Warsaw and attempted attacks in the Czech Republic before being apprehended and sentenced to prison.

Classification

Confidence: High

This event describes clear Russian hostile hybrid warfare activity involving disinformation and false-flag operations to frame Ukraine, supported by evidence of Kremlin-linked Telegram channels and coordination instructions to a saboteur. There is no description of allied defensive measures in the report.

Source URL

https://tvpworld.com/90930114/russian-spies-shared-clips-of-arson-hit-on-poland-report

Open source

Provenance

Publisher: extension
Submitted: Feb 1, 2026, 00:14 UTC
Last updated: Nov 8, 2026, 22:54 UTC
Event time: May 1, 2024, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "9563fb4c-ee0f-41c2-95f0-0bfe8bafa68f",
  "url": "https://tvpworld.com/90930114/russian-spies-shared-clips-of-arson-hit-on-poland-report",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Information Operations",
  "incident_type": "Propaganda & disinformation campaigns",
  "country": "Poland",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "Poland",
    "Ukraine",
    "Disinformation",
    "Arson",
    "Sabotage",
    "Hybrid warfare",
    "Kremlin influence",
    "Telegram",
    "Sabotage operations"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": "Russian spies ‘leaked video of arson attack’ on Polish warehouse in bid to frame Ukraine",
  "description": "In May 2024, Russian spies shared footage on Telegram of an arson attack at a construction warehouse in Radom, Poland, wrongly implicating Ukrainians. The footage appeared hours after the attack but before Polish media reported it. A Colombian national was charged with sabotage for the July 2025 fire and had received Kremlin instructions. The incident is part of a broader Russian disinformation campaign using fake accounts to fuel anti-Ukrainian sentiment and support sabotage operations across Europe. The suspect also carried out another arson in Warsaw and attempted attacks in the Czech Republic before being apprehended and sentenced to prison.",
  "summary_short": "In May 2024, Russian-linked Telegram channels leaked footage of a warehouse arson in Radom, Poland, aiming to falsely blame Ukrainians while a Colombian man was charged with sabotage.",
  "summary_extended": null,
  "actor_primary": "Colombian national",
  "target_primary": null,
  "location_text": "Radom, Poland",
  "location_region": null,
  "location_coordinates_lat": 51.919438,
  "location_coordinates_lon": 19.145136,
  "location_precision": "Exact",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "This event describes clear Russian hostile hybrid warfare activity involving disinformation and false-flag operations to frame Ukraine, supported by evidence of Kremlin-linked Telegram channels and coordination instructions to a saboteur. There is no description of allied defensive measures in the report.",
  "event_time_utc": "2024-05-01T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-01T00:14:40.733Z",
  "updated_at": "2026-11-08T22:54:26.137Z",
  "reliability_band": "strong",
  "location_precision_band": "exact",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: UnknownLocation: Exact

Source reliability

Info credibility

Event time

May 1, 2024, 00:00 UTC

Event time confidence

unknown

Location

Radom, Poland

Primary actor

Colombian national

Country

Poland

Tags

Russia, Poland, Ukraine, Disinformation, Arson, Sabotage, Hybrid warfare, Kremlin influence, Telegram, Sabotage operations

Nodes

Node 2: 5th Column

Loading signal...

{ "id": "9563fb4c-ee0f-41c2-95f0-0bfe8bafa68f", "url": "https://tvpworld.com/90930114/russian-spies-shared-clips-of-arson-hit-on-poland-report", "source": "extension", "status": "approved", "category": "Cyber & Information Warfare", "subcategory": "Information Operations", "incident_type": "Propaganda & disinformation campaigns", "country": "Poland", "source_reliability": "C", "info_credibility": "3", "tags": [ "Russia", "Poland", "Ukraine", "Disinformation", "Arson", "Sabotage", "Hybrid warfare", "Kremlin influence", "Telegram", "Sabotage operations" ], "nodes": [ "Node 2: 5th Column" ], "countries": [], "where_text": "Cyberspace", "headline": "Russian spies ‘leaked video of arson attack’ on Polish warehouse in bid to frame Ukraine", "description": "In May 2024, Russian spies shared footage on Telegram of an arson attack at a construction warehouse in Radom, Poland, wrongly implicating Ukrainians. The footage appeared hours after the attack but before Polish media reported it. A Colombian national was charged with sabotage for the July 2025 fire and had received Kremlin instructions. The incident is part of a broader Russian disinformation campaign using fake accounts to fuel anti-Ukrainian sentiment and support sabotage operations across Europe. The suspect also carried out another arson in Warsaw and attempted attacks in the Czech Republic before being apprehended and sentenced to prison.", "summary_short": "In May 2024, Russian-linked Telegram channels leaked footage of a warehouse arson in Radom, Poland, aiming to falsely blame Ukrainians while a Colombian man was charged with sabotage.", "summary_extended": null, "actor_primary": "Colombian national", "target_primary": null, "location_text": "Radom, Poland", "location_region": null, "location_coordinates_lat": 51.919438, "location_coordinates_lon": 19.145136, "location_precision": "Exact", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "This event describes clear Russian hostile hybrid warfare activity involving disinformation and false-flag operations to frame Ukraine, supported by evidence of Kremlin-linked Telegram channels and coordination instructions to a saboteur. There is no description of allied defensive measures in the report.", "event_time_utc": "2024-05-01T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "unknown", "created_at": "2026-02-01T00:14:40.733Z", "updated_at": "2026-11-08T22:54:26.137Z", "reliability_band": "strong", "location_precision_band": "exact", "time_precision_band": "unknown", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }