Signal
Submitted
Feb 1, 2026, 00:14 UTC
Poland detained 32 suspects for pro-Russian sabotage and arson attacks targeting infrastructure, with trials underway in 2025.
Since the start of the Russian invasion of Ukraine, Polish authorities have arrested 32 suspects accused of working with Russian intelligence to destabilize Poland through sabotage and arson on local infrastructure. The group includes multiple nationalities and coordinated operations via Telegram. A Colombian suspect involved in setting fires to depots in Warsaw and Radom in 2024 was convicted in the Czech Republic for further planned attacks. The attacks are part of a broader Russian hybrid warfare strategy involving sabotage, disinformation, and espionage. Poland responded by shutting down the Russian consulate in Kraków in 2024 linked to Russian intelligence and launched investigations into sabotage of national air traffic control. Prime Minister Donald Tusk affirmed firm action against those aiding Russian efforts to destabilize Poland.
Confidence: High
The event clearly describes coordinated hostile sabotage and arson operations directed by Russian intelligence agents in Poland, resulting in arrests and ongoing trials, consistent with Russian hybrid warfare activities.
Source URL
https://therecord.media/poland-32-suspects-pro-russia-sabotage
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "e12cf624-216f-49cd-b6f5-a61e1a9d4728",
"url": "https://therecord.media/poland-32-suspects-pro-russia-sabotage",
"source": "extension",
"status": "approved",
"category": "Military & Paramilitary Operations",
"subcategory": "Unconventional / Paramilitary",
"incident_type": "Proxy forces, militias, mercenaries (e.g. Wagner-type groups)",
"country": "Poland",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"Russia",
"Poland",
"sabotage",
"hybrid warfare",
"arson",
"intelligence",
"proxy forces",
"Telegram",
"disinformation",
"colombia"
],
"nodes": [
"Node 1: Borders"
],
"countries": [],
"where_text": "Land",
"headline": null,
"description": "Polish authorities have detained 32 suspects, including Polish, Russian, Ukrainian, Belarusian, and Colombian nationals, allegedly recruited by Russian intelligence to conduct sabotage and arson attacks targeting Polish infrastructure. The suspects face trial for activities aimed at destabilizing Poland as part of a broader Russian hybrid warfare campaign. A 27-year-old Colombian suspect linked to attacks on construction depots in Warsaw and Radom in May 2024 was sentenced in the Czech Republic for planning further attacks. Polish Prime Minister Donald Tusk emphasized ruthless action against such sabotage. The operations were coordinated via Telegram and involved disinformation campaigns. Poland also shut down the Russian consulate in Kraków in 2024 linked to Russian intelligence, and ongoing investigations include potential sabotage of Poland's air traffic control system.",
"summary_short": "Poland detained 32 suspects for pro-Russian sabotage and arson attacks targeting infrastructure, with trials underway in 2025.",
"summary_extended": "Since the start of the Russian invasion of Ukraine, Polish authorities have arrested 32 suspects accused of working with Russian intelligence to destabilize Poland through sabotage and arson on local infrastructure. The group includes multiple nationalities and coordinated operations via Telegram. A Colombian suspect involved in setting fires to depots in Warsaw and Radom in 2024 was convicted in the Czech Republic for further planned attacks. The attacks are part of a broader Russian hybrid warfare strategy involving sabotage, disinformation, and espionage. Poland responded by shutting down the Russian consulate in Kraków in 2024 linked to Russian intelligence and launched investigations into sabotage of national air traffic control. Prime Minister Donald Tusk affirmed firm action against those aiding Russian efforts to destabilize Poland.",
"actor_primary": "Russian intelligence",
"target_primary": null,
"location_text": "Warsaw, Radom, Czech Republic",
"location_region": null,
"location_coordinates_lat": 51.919438,
"location_coordinates_lon": 19.145136,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The event clearly describes coordinated hostile sabotage and arson operations directed by Russian intelligence agents in Poland, resulting in arrests and ongoing trials, consistent with Russian hybrid warfare activities.",
"event_time_utc": "2025-07-29T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-02-01T00:14:48.940Z",
"updated_at": "2026-11-08T21:37:30.421Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Jul 29, 2025, 00:00 UTC
Event time confidence
pm24h
Location
Warsaw, Radom, Czech Republic
Primary actor
Russian intelligence
Country
Poland
Tags
Russia, Poland, sabotage, hybrid warfare, arson, intelligence, proxy forces, Telegram, disinformation, colombia
Nodes
Node 1: Borders
Signal
Submitted
Feb 1, 2026, 00:14 UTC
Poland detained 32 suspects for pro-Russian sabotage and arson attacks targeting infrastructure, with trials underway in 2025.
Since the start of the Russian invasion of Ukraine, Polish authorities have arrested 32 suspects accused of working with Russian intelligence to destabilize Poland through sabotage and arson on local infrastructure. The group includes multiple nationalities and coordinated operations via Telegram. A Colombian suspect involved in setting fires to depots in Warsaw and Radom in 2024 was convicted in the Czech Republic for further planned attacks. The attacks are part of a broader Russian hybrid warfare strategy involving sabotage, disinformation, and espionage. Poland responded by shutting down the Russian consulate in Kraków in 2024 linked to Russian intelligence and launched investigations into sabotage of national air traffic control. Prime Minister Donald Tusk affirmed firm action against those aiding Russian efforts to destabilize Poland.
Confidence: High
The event clearly describes coordinated hostile sabotage and arson operations directed by Russian intelligence agents in Poland, resulting in arrests and ongoing trials, consistent with Russian hybrid warfare activities.
Source URL
https://therecord.media/poland-32-suspects-pro-russia-sabotage
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "e12cf624-216f-49cd-b6f5-a61e1a9d4728",
"url": "https://therecord.media/poland-32-suspects-pro-russia-sabotage",
"source": "extension",
"status": "approved",
"category": "Military & Paramilitary Operations",
"subcategory": "Unconventional / Paramilitary",
"incident_type": "Proxy forces, militias, mercenaries (e.g. Wagner-type groups)",
"country": "Poland",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"Russia",
"Poland",
"sabotage",
"hybrid warfare",
"arson",
"intelligence",
"proxy forces",
"Telegram",
"disinformation",
"colombia"
],
"nodes": [
"Node 1: Borders"
],
"countries": [],
"where_text": "Land",
"headline": null,
"description": "Polish authorities have detained 32 suspects, including Polish, Russian, Ukrainian, Belarusian, and Colombian nationals, allegedly recruited by Russian intelligence to conduct sabotage and arson attacks targeting Polish infrastructure. The suspects face trial for activities aimed at destabilizing Poland as part of a broader Russian hybrid warfare campaign. A 27-year-old Colombian suspect linked to attacks on construction depots in Warsaw and Radom in May 2024 was sentenced in the Czech Republic for planning further attacks. Polish Prime Minister Donald Tusk emphasized ruthless action against such sabotage. The operations were coordinated via Telegram and involved disinformation campaigns. Poland also shut down the Russian consulate in Kraków in 2024 linked to Russian intelligence, and ongoing investigations include potential sabotage of Poland's air traffic control system.",
"summary_short": "Poland detained 32 suspects for pro-Russian sabotage and arson attacks targeting infrastructure, with trials underway in 2025.",
"summary_extended": "Since the start of the Russian invasion of Ukraine, Polish authorities have arrested 32 suspects accused of working with Russian intelligence to destabilize Poland through sabotage and arson on local infrastructure. The group includes multiple nationalities and coordinated operations via Telegram. A Colombian suspect involved in setting fires to depots in Warsaw and Radom in 2024 was convicted in the Czech Republic for further planned attacks. The attacks are part of a broader Russian hybrid warfare strategy involving sabotage, disinformation, and espionage. Poland responded by shutting down the Russian consulate in Kraków in 2024 linked to Russian intelligence and launched investigations into sabotage of national air traffic control. Prime Minister Donald Tusk affirmed firm action against those aiding Russian efforts to destabilize Poland.",
"actor_primary": "Russian intelligence",
"target_primary": null,
"location_text": "Warsaw, Radom, Czech Republic",
"location_region": null,
"location_coordinates_lat": 51.919438,
"location_coordinates_lon": 19.145136,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The event clearly describes coordinated hostile sabotage and arson operations directed by Russian intelligence agents in Poland, resulting in arrests and ongoing trials, consistent with Russian hybrid warfare activities.",
"event_time_utc": "2025-07-29T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-02-01T00:14:48.940Z",
"updated_at": "2026-11-08T21:37:30.421Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Jul 29, 2025, 00:00 UTC
Event time confidence
pm24h
Location
Warsaw, Radom, Czech Republic
Primary actor
Russian intelligence
Country
Poland
Tags
Russia, Poland, sabotage, hybrid warfare, arson, intelligence, proxy forces, Telegram, disinformation, colombia
Nodes
Node 1: Borders