Poland’s Internal Security Agency (ABW) has disrupted an intelligence-gathering operation run by a Russian agent network, arresting three Polish citizens on suspicion of spying for Moscow. The detentions took place on 12 May in the city of Bialystok, according to an official statement from the ABW. The suspects are accused of collecting information on the deployment of Nato forces in Poland, spreading propaganda and disinformation materials, and preparing to carry out sabotage tasks. They also allegedly disseminated symbols supporting Russia’s aggression against Ukraine and publicly praised the war. A court in Bialystok ordered all three to be held in pre-trial detention for three months as the investigation continues. If convicted, they face sentences ranging from eight years to life imprisonment.
Espionage targets military infrastructure and logistics routes
The investigation reveals that the suspects were gathering intelligence on critical military infrastructure and supply routes used to deliver Western weaponry to Ukraine. Poland has become a primary target for Russian intelligence since the full-scale invasion of Ukraine in February 2022, serving as a key logistics hub for Nato aid. Warsaw has also been one of the most vocal advocates for stronger sanctions against Moscow and a reinforced eastern flank of the alliance. In February 2026, a Polish defence ministry official was arrested in Warsaw on suspicion of long-term cooperation with Russian intelligence, while a Territorial Defence soldier was detained in mid-April on similar charges.
Kremlin’s hybrid war extends beyond Ukraine’s borders
The exposure of the spy network underscores how Russia’s war against Ukraine has evolved into a broader hybrid aggression against Europe, according to analysts. Kremlin agencies are using a combination of espionage, disinformation campaigns and sabotage to undermine Nato unity and weaken European support for Kyiv. The collection of data on Nato military infrastructure and logistics routes demonstrates that Moscow views EU member states as adversaries. Polish Radio reported that the suspects were part of a wider network tasked with destabilising Poland’s internal situation and provoking conflicts between Warsaw and Kyiv.
Moscow seeks to erode Polish-Ukrainian relations
Russian special services are particularly interested in sowing distrust between Poland and Ukraine through provocations and information operations. By undermining Polish societal support for Ukraine and triggering internal political strife, Moscow aims to reduce the flow of Western military assistance to Kyiv. The use of classic agent networks combined with cyberattacks and attacks on critical infrastructure reflects a long-term strategy to exhaust Nato allies and erode public confidence in state institutions. The Independent noted that Poland’s strategic role as a transit country for arms and humanitarian aid makes it a priority target for Russian intelligence.
European security services urged to enhance coordination
The recent arrests highlight the need for stronger coordination between Nato and EU intelligence agencies, including increased sharing of classified data and more active monitoring of recruitment attempts through digital platforms. Protecting critical infrastructure, military installations and aid logistics routes should be a top priority. Without systematic countermeasures against Russian espionage networks, Europe risks facing new acts of sabotage and large-scale security crises. The ABW has stated that the investigation is ongoing and further arrests cannot be ruled out.
