Russian-backed sabotage acts target Lithuania and Poland, including arson in Vilnius and Wroclaw

Military & Paramilitary OperationsUnconventional / ParamilitaryCross-border raids

Aggressor

Summary

Sabotage attacks involving arson in Lithuania and Poland linked to Russian hybrid warfare have led to multiple arrests of suspects of Ukrainian, Belarusian, and Polish nationality.

In May 2024, a series of coordinated sabotage acts including arson attacked facilities in Lithuania and Poland, notably a fire at the IKEA warehouse in Vilnius and an attempted arson at a paint factory in Wroclaw. Polish Prime Minister Donald Tusk publicly identified these acts as sabotage orchestrated by Russian intelligence. Nine suspects from Ukraine, Belarus, and Poland were arrested in connection to these acts, which experts characterize as part of Russia's systematic hybrid warfare effort amid the conflict in Ukraine. Former Lithuanian officials describe these attacks as state-directed sabotage or diversion, predicting further such incidents. Lithuanian law enforcement remains cautious in public statements pending investigation outcomes, with prosecutors unable to confirm direct Russian state involvement at this stage. Analysts warn that hybrid warfare is evolving into widespread destabilization tactics across Europe, including cyberattacks, terrorist plots, and infrastructure disruptions.

Classification

Confidence: High

The event clearly involves hostile sabotage actions linked by Polish leadership and experts to Russian intelligence efforts targeting Lithuania and Poland, consistent with hybrid warfare tactics during the ongoing conflict in Ukraine. Lithuanian authorities partially confirm investigations but have not denied Russian involvement.

Source URL

https://lrt.lt/en/news-in-english/19/2279598/who-is-behind-sabotages-and-diversions-in-lithuania-and-poland

Open source

Provenance

Publisher: extension
Submitted: Feb 1, 2026, 00:14 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: May 23, 2024, 05:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "b475c13c-50d2-4010-94fd-ff1f6f6f1988",
  "url": "https://lrt.lt/en/news-in-english/19/2279598/who-is-behind-sabotages-and-diversions-in-lithuania-and-poland",
  "source": "extension",
  "status": "approved",
  "category": "Military & Paramilitary Operations",
  "subcategory": "Unconventional / Paramilitary",
  "incident_type": "Cross-border raids",
  "country": "Lithuania",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "sabotage",
    "arson",
    "Russia",
    "hybrid warfare",
    "Lithuania",
    "Poland",
    "russian intelligence operations",
    "cross-border attacks"
  ],
  "nodes": [
    "Node 1: Borders"
  ],
  "countries": [],
  "where_text": "Land",
  "headline": "Russian-backed sabotage acts target Lithuania and Poland, including arson in Vilnius and Wroclaw",
  "description": "A series of sabotage acts involving arson and attempted arson have targeted facilities in Lithuania and Poland, including a fire at the IKEA store in Vilnius and an attempt to set fire to a paint factory in Wroclaw. Polish Prime Minister Donald Tusk confirmed that nine suspects of Ukrainian, Belarusian, and Polish nationality were arrested for involvement in these sabotage activities on behalf of Russian services. Experts and former officials identify these attacks as part of Russia's hybrid warfare against Europe amid the ongoing war in Ukraine. Lithuanian law enforcement has refrained from disclosing full details, with investigations ongoing and no official confirmation of direct Russian state involvement yet. Intelligence experts warn of a likely increase and continuation of such destabilizing actions, including possible cyberattacks, explosions, and other forms of disruption.",
  "summary_short": "Sabotage attacks involving arson in Lithuania and Poland linked to Russian hybrid warfare have led to multiple arrests of suspects of Ukrainian, Belarusian, and Polish nationality.",
  "summary_extended": "In May 2024, a series of coordinated sabotage acts including arson attacked facilities in Lithuania and Poland, notably a fire at the IKEA warehouse in Vilnius and an attempted arson at a paint factory in Wroclaw. Polish Prime Minister Donald Tusk publicly identified these acts as sabotage orchestrated by Russian intelligence. Nine suspects from Ukraine, Belarus, and Poland were arrested in connection to these acts, which experts characterize as part of Russia's systematic hybrid warfare effort amid the conflict in Ukraine. Former Lithuanian officials describe these attacks as state-directed sabotage or diversion, predicting further such incidents. Lithuanian law enforcement remains cautious in public statements pending investigation outcomes, with prosecutors unable to confirm direct Russian state involvement at this stage. Analysts warn that hybrid warfare is evolving into widespread destabilization tactics across Europe, including cyberattacks, terrorist plots, and infrastructure disruptions.",
  "actor_primary": "Russian intelligence",
  "target_primary": null,
  "location_text": "Vilnius, Lithuania and Wroclaw, Poland",
  "location_region": null,
  "location_coordinates_lat": 55.169438,
  "location_coordinates_lon": 23.881275,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The event clearly involves hostile sabotage actions linked by Polish leadership and experts to Russian intelligence efforts targeting Lithuania and Poland, consistent with hybrid warfare tactics during the ongoing conflict in Ukraine. Lithuanian authorities partially confirm investigations but have not denied Russian involvement.",
  "event_time_utc": "2024-05-23T05:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-01T00:14:44.310Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: UnknownLocation: Regional

Source reliability

Info credibility

Event time

May 23, 2024, 05:00 UTC

Event time confidence

unknown

Location

Vilnius, Lithuania and Wroclaw, Poland

Primary actor

Russian intelligence

Country

Lithuania

Tags

sabotage, arson, Russia, hybrid warfare, Lithuania, Poland, russian intelligence operations, cross-border attacks

Nodes

Node 1: Borders

Loading signal...

{ "id": "b475c13c-50d2-4010-94fd-ff1f6f6f1988", "url": "https://lrt.lt/en/news-in-english/19/2279598/who-is-behind-sabotages-and-diversions-in-lithuania-and-poland", "source": "extension", "status": "approved", "category": "Military & Paramilitary Operations", "subcategory": "Unconventional / Paramilitary", "incident_type": "Cross-border raids", "country": "Lithuania", "source_reliability": "C", "info_credibility": "3", "tags": [ "sabotage", "arson", "Russia", "hybrid warfare", "Lithuania", "Poland", "russian intelligence operations", "cross-border attacks" ], "nodes": [ "Node 1: Borders" ], "countries": [], "where_text": "Land", "headline": "Russian-backed sabotage acts target Lithuania and Poland, including arson in Vilnius and Wroclaw", "description": "A series of sabotage acts involving arson and attempted arson have targeted facilities in Lithuania and Poland, including a fire at the IKEA store in Vilnius and an attempt to set fire to a paint factory in Wroclaw. Polish Prime Minister Donald Tusk confirmed that nine suspects of Ukrainian, Belarusian, and Polish nationality were arrested for involvement in these sabotage activities on behalf of Russian services. Experts and former officials identify these attacks as part of Russia's hybrid warfare against Europe amid the ongoing war in Ukraine. Lithuanian law enforcement has refrained from disclosing full details, with investigations ongoing and no official confirmation of direct Russian state involvement yet. Intelligence experts warn of a likely increase and continuation of such destabilizing actions, including possible cyberattacks, explosions, and other forms of disruption.", "summary_short": "Sabotage attacks involving arson in Lithuania and Poland linked to Russian hybrid warfare have led to multiple arrests of suspects of Ukrainian, Belarusian, and Polish nationality.", "summary_extended": "In May 2024, a series of coordinated sabotage acts including arson attacked facilities in Lithuania and Poland, notably a fire at the IKEA warehouse in Vilnius and an attempted arson at a paint factory in Wroclaw. Polish Prime Minister Donald Tusk publicly identified these acts as sabotage orchestrated by Russian intelligence. Nine suspects from Ukraine, Belarus, and Poland were arrested in connection to these acts, which experts characterize as part of Russia's systematic hybrid warfare effort amid the conflict in Ukraine. Former Lithuanian officials describe these attacks as state-directed sabotage or diversion, predicting further such incidents. Lithuanian law enforcement remains cautious in public statements pending investigation outcomes, with prosecutors unable to confirm direct Russian state involvement at this stage. Analysts warn that hybrid warfare is evolving into widespread destabilization tactics across Europe, including cyberattacks, terrorist plots, and infrastructure disruptions.", "actor_primary": "Russian intelligence", "target_primary": null, "location_text": "Vilnius, Lithuania and Wroclaw, Poland", "location_region": null, "location_coordinates_lat": 55.169438, "location_coordinates_lon": 23.881275, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The event clearly involves hostile sabotage actions linked by Polish leadership and experts to Russian intelligence efforts targeting Lithuania and Poland, consistent with hybrid warfare tactics during the ongoing conflict in Ukraine. Lithuanian authorities partially confirm investigations but have not denied Russian involvement.", "event_time_utc": "2024-05-23T05:00:00.000Z", "end_time_utc": null, "event_time_confidence": "unknown", "created_at": "2026-02-01T00:14:44.310Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "unknown", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }