Three Ukrainians were convicted in Poland for participating in a Russia-linked sabotage and arson campaign targeting shopping centers and other buildings in multiple EU countries during 2023-2024.

Terrorism & Criminal Proxy TacticsTerrorismBomb threats, assassination plots, targeted killings

Aggressor

Summary

On October 24, 2025, Poland's National Prosecutor's Office announced the conviction of three Ukrainian nationals—Serhii R., Pavlo T., and Vladyslav Y.—for involvement in an organized group conducting sabotage and terrorism on Russia's behalf across Poland, Lithuania, Latvia, Ukraine, and Russia during 2023 and 2024. The group committed arson attacks on large buildings, including the destruction of Warsaw's largest shopping center (Marywilska 44) in May 2024 and an IKEA store in Vilnius the same month. The convicted men received sentences ranging from 16 months to five and a half years. Two of them also aided the group's leader, Serhii Chalyi, in fleeing Poland; Chalyi remains wanted by law enforcement. Investigators confirmed the attacks were ordered by Russian intelligence services, aiming to intimidate populations and influence public opinion. Polish authorities have since closed Russian consulates in retaliation and detained additional suspects linked to similar sabotage operations. The Kremlin denies involvement, calling the accusations baseless and driven by Russophobia.

Classification

Confidence: High

The event details how a Russia-linked organized sabotage-terrorism group, including multiple Ukrainian nationals, conducted arson attacks in Poland and other EU countries on orders from Russian intelligence. This constitutes aggressive hostile hybrid warfare activity. The article does not describe defensive preparations but focuses on criminal acts and prosecutions, so the defense preparation flag is false.

Source URL

https://notesfrompoland.com/2025/10/24/three-ukrainians-convicted-in-poland-over-role-in-russian-linked-arson-campaign

Open source

Provenance

Publisher: extension
Submitted: Feb 1, 2026, 00:14 UTC
Last updated: Nov 4, 2026, 08:36 UTC
Event time: Oct 24, 2025, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "d57ff806-f097-40c7-8f37-bd0a0764f475",
  "url": "https://notesfrompoland.com/2025/10/24/three-ukrainians-convicted-in-poland-over-role-in-russian-linked-arson-campaign",
  "source": "extension",
  "status": "approved",
  "category": "Terrorism & Criminal Proxy Tactics",
  "subcategory": "Terrorism",
  "incident_type": "Bomb threats, assassination plots, targeted killings",
  "country": "Poland",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "Poland",
    "Ukraine",
    "Sabotage",
    "Terrorism",
    "Arson",
    "Sabotage Campaign",
    "russian intelligence operations",
    "Convictions",
    "Hybrid Warfare",
    "Russian Consulate Closure"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Land",
  "headline": null,
  "description": "The Warsaw-Praga district court convicted three Ukrainians for participating in a Russia-directed sabotage-terrorist group responsible for arson attacks on major shopping centers in Poland and Lithuania during 2023-2024. The group also operated in Latvia, Ukraine, and Russia. Two of the convicts facilitated the escape of the group's leader, Serhii Chalyi, who remains at large. Arson attacks, notably targeting Warsaw’s largest shopping center and an IKEA store in Vilnius, were confirmed to have been ordered by Russian intelligence with the intent to intimidate public and sway opinion. Poland responded by closing Russian consulates and continues investigations, detaining more suspects planning sabotage acts on Russia’s behalf. Russia denies the charges, branding them Russophobic.",
  "summary_short": "Three Ukrainians were convicted in Poland for participating in a Russia-linked sabotage and arson campaign targeting shopping centers and other buildings in multiple EU countries during 2023-2024.",
  "summary_extended": "On October 24, 2025, Poland's National Prosecutor's Office announced the conviction of three Ukrainian nationals—Serhii R., Pavlo T., and Vladyslav Y.—for involvement in an organized group conducting sabotage and terrorism on Russia's behalf across Poland, Lithuania, Latvia, Ukraine, and Russia during 2023 and 2024. The group committed arson attacks on large buildings, including the destruction of Warsaw's largest shopping center (Marywilska 44) in May 2024 and an IKEA store in Vilnius the same month. The convicted men received sentences ranging from 16 months to five and a half years. Two of them also aided the group's leader, Serhii Chalyi, in fleeing Poland; Chalyi remains wanted by law enforcement. Investigators confirmed the attacks were ordered by Russian intelligence services, aiming to intimidate populations and influence public opinion. Polish authorities have since closed Russian consulates in retaliation and detained additional suspects linked to similar sabotage operations. The Kremlin denies involvement, calling the accusations baseless and driven by Russophobia.",
  "actor_primary": "Serhii Chalyi",
  "target_primary": null,
  "location_text": "Warsaw, Poland; Vilnius, Lithuania",
  "location_region": null,
  "location_coordinates_lat": 51.919438,
  "location_coordinates_lon": 19.145136,
  "location_precision": "Exact",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The event details how a Russia-linked organized sabotage-terrorism group, including multiple Ukrainian nationals, conducted arson attacks in Poland and other EU countries on orders from Russian intelligence. This constitutes aggressive hostile hybrid warfare activity. The article does not describe defensive preparations but focuses on criminal acts and prosecutions, so the defense preparation flag is false.",
  "event_time_utc": "2025-10-24T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-01T00:14:47.785Z",
  "updated_at": "2026-11-04T08:36:03.522Z",
  "reliability_band": "strong",
  "location_precision_band": "exact",
  "time_precision_band": "unknown",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: SignificantAttribution: HighSingle sourceTime: UnknownLocation: Exact

Source reliability

Info credibility

Event time

Oct 24, 2025, 00:00 UTC

Event time confidence

unknown

Location

Warsaw, Poland; Vilnius, Lithuania

Primary actor

Serhii Chalyi

Country

Poland

Tags

Russia, Poland, Ukraine, Sabotage, Terrorism, Arson, Sabotage Campaign, russian intelligence operations, Convictions, Hybrid Warfare, Russian Consulate Closure

Loading signal...

{ "id": "d57ff806-f097-40c7-8f37-bd0a0764f475", "url": "https://notesfrompoland.com/2025/10/24/three-ukrainians-convicted-in-poland-over-role-in-russian-linked-arson-campaign", "source": "extension", "status": "approved", "category": "Terrorism & Criminal Proxy Tactics", "subcategory": "Terrorism", "incident_type": "Bomb threats, assassination plots, targeted killings", "country": "Poland", "source_reliability": "C", "info_credibility": "3", "tags": [ "Russia", "Poland", "Ukraine", "Sabotage", "Terrorism", "Arson", "Sabotage Campaign", "russian intelligence operations", "Convictions", "Hybrid Warfare", "Russian Consulate Closure" ], "nodes": [], "countries": [], "where_text": "Land", "headline": null, "description": "The Warsaw-Praga district court convicted three Ukrainians for participating in a Russia-directed sabotage-terrorist group responsible for arson attacks on major shopping centers in Poland and Lithuania during 2023-2024. The group also operated in Latvia, Ukraine, and Russia. Two of the convicts facilitated the escape of the group's leader, Serhii Chalyi, who remains at large. Arson attacks, notably targeting Warsaw’s largest shopping center and an IKEA store in Vilnius, were confirmed to have been ordered by Russian intelligence with the intent to intimidate public and sway opinion. Poland responded by closing Russian consulates and continues investigations, detaining more suspects planning sabotage acts on Russia’s behalf. Russia denies the charges, branding them Russophobic.", "summary_short": "Three Ukrainians were convicted in Poland for participating in a Russia-linked sabotage and arson campaign targeting shopping centers and other buildings in multiple EU countries during 2023-2024.", "summary_extended": "On October 24, 2025, Poland's National Prosecutor's Office announced the conviction of three Ukrainian nationals—Serhii R., Pavlo T., and Vladyslav Y.—for involvement in an organized group conducting sabotage and terrorism on Russia's behalf across Poland, Lithuania, Latvia, Ukraine, and Russia during 2023 and 2024. The group committed arson attacks on large buildings, including the destruction of Warsaw's largest shopping center (Marywilska 44) in May 2024 and an IKEA store in Vilnius the same month. The convicted men received sentences ranging from 16 months to five and a half years. Two of them also aided the group's leader, Serhii Chalyi, in fleeing Poland; Chalyi remains wanted by law enforcement. Investigators confirmed the attacks were ordered by Russian intelligence services, aiming to intimidate populations and influence public opinion. Polish authorities have since closed Russian consulates in retaliation and detained additional suspects linked to similar sabotage operations. The Kremlin denies involvement, calling the accusations baseless and driven by Russophobia.", "actor_primary": "Serhii Chalyi", "target_primary": null, "location_text": "Warsaw, Poland; Vilnius, Lithuania", "location_region": null, "location_coordinates_lat": 51.919438, "location_coordinates_lon": 19.145136, "location_precision": "Exact", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The event details how a Russia-linked organized sabotage-terrorism group, including multiple Ukrainian nationals, conducted arson attacks in Poland and other EU countries on orders from Russian intelligence. This constitutes aggressive hostile hybrid warfare activity. The article does not describe defensive preparations but focuses on criminal acts and prosecutions, so the defense preparation flag is false.", "event_time_utc": "2025-10-24T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "unknown", "created_at": "2026-02-01T00:14:47.785Z", "updated_at": "2026-11-04T08:36:03.522Z", "reliability_band": "strong", "location_precision_band": "exact", "time_precision_band": "unknown", "severity_band": "significant", "attribution_confidence_band": "high", "attribution_basis": "single_source" }