Poland's Espionage Surge: Foreign Networks Exposed
Poland’s Internal Security Agency (ABW) reports a sharp rise in espionage and sabotage activity linked to foreign intelligence services, with 69 investigations opened in a two-year period ending in 2025 — matching the total number of such investigations from 1991 to 2023. In 2025 alone, ABW opened 48 espionage investigations, more than double the number opened in 2024. Authorities say 82 people were charged on espionage-related counts across the two years, including a case naming a Russian national accused of running a network that mainly used Ukrainian and Belarusian operatives.
ABW identifies Russian and Belarusian intelligence activity as the primary drivers of the increase. The agency says it has prevented multiple sabotage and espionage operations targeting military facilities, critical infrastructure, public utilities and transport. ABW describes a change in Russian tactics from recruiting single, disposable online operatives toward organizing professional “sabotage cells” that rely on closed structures such as organized-crime networks and on recruits with law enforcement, military or mercenary backgrounds. The agency also reports expanded training inside Russia to prepare agents for sabotage and, it alleges, for acts that could cause casualties.
Poland is named as a frequent target: a separate assessment cited Poland as accounting for 31 of 151 identified sabotage incidents in Europe since 2022. ABW points to a November 2025 incident on a railway used for deliveries to Ukraine in which explosions and equipment malfunctions disrupted two trains but caused no deaths. The agency warns that surveillance and sabotage preparations are escalating and that the risk of casualties has increased.
ABW reports increased intelligence activity by China in Poland, saying Chinese officers have sought to recruit experts, academics, officials and people linked to law enforcement by offering well‑paid assignments and using business ties to advance intelligence aims. In response to security concerns, authorities implemented measures including a ban on Chinese‑made vehicles at military bases and restrictions preventing military phones from connecting to car systems.
On the domestic security front, officials describe the overall terrorism risk from Islamist extremism as relatively low but say several cases involved teenagers planning attacks inspired by the Islamic State; authorities have urged parents to watch for signs of radicalisation among young people.
Broader consequences noted by officials include the targeting of Euro‑Atlantic institutions and efforts to destabilize countries politically and economically, with ABW stating some operations were directed or supported by Belarusian services and, in some instances, by Chinese actors.
Original Sources: 1, 2, 3, 4, 5, 6, 7, 8
Real Value Analysis
No real value analysis available for this item
Bias analysis
"more than double the number opened in 2024 and bringing the two-year total to 69 — a figure equal to all such investigations from 1991 to 2023."
This frames the increase as dramatic by comparing short recent years to a long prior period. It helps the idea that 2024–25 are exceptional without explaining reasons. The wording pushes a sense of alarm by selection and comparison, which favors a narrative of sudden rise rather than steady change.
"Russian and Belarusian intelligence activity is identified as the main driver of the rise in cases"
This assigns clear blame to specific foreign states as the "main driver" without showing supporting detail here. The phrase makes readers focus on those governments as threats, which helps a security-first interpretation and hides other possible causes by omission.
"has prevented multiple sabotage and espionage operations targeted at military facilities, critical infrastructure, public utilities and transport."
This credits the agency with having "prevented" operations. The passive-success framing presents prevention as fact and highlights agency effectiveness, which promotes trust in authorities. It also hides who provided the evidence or how prevention was measured.
"Charges related to espionage were brought against 82 people across the two-year period"
This reports charges, not convictions, but the short phrasing can lead readers to equate charges with guilt. It helps portray a large problem driven by many people while omitting outcomes or acquittals, which could change how serious it seems.
"one case named a Russian national accused of running a network that used mainly Ukrainian and Belarusian operatives."
The term "accused" is correct, but listing nationalities—Russian, Ukrainian, Belarusian—links criminal activity to ethnic/national groups. This wording can encourage stereotyping of those nationalities and frames the issue as foreign-organized crime without evidence here.
"Poland as the country with the largest share of sabotage incidents in Europe since 2022, accounting for 31 of 151 identified events."
Presenting a share of incidents implies Poland is uniquely targeted or problematic. The phrase "identified events" hides how identification was done and by whom, which can skew the impression by selective sourcing or detection differences between countries.
"Chinese intelligence activity in Poland is described as increasing, with reports that Chinese officers have sought to recruit experts, academics, officials and people linked to law enforcement by offering well-paid assignments and using business ties to advance intelligence aims."
This ties recruitment to "well-paid assignments" and "business ties," which suggests commercial cover and mercenary motives. The phrasing emphasizes economic leverage and implies malicious intent from business ties, shaping a negative view of Chinese activity without showing fuller context.
"Security concerns prompted a ban on Chinese-made vehicles at military bases and restrictions on connecting military phones to car systems."
This links policy measures directly to "security concerns" as the cause. The causal phrasing helps justify the ban as necessary and reasonable, closing off debate about trade, procurement impact, or alternative measures by presenting the decision as straightforwardly security-driven.
"The threat of terrorism tied to Islamic extremism is reported as relatively low overall, but several cases involving teenagers planning attacks inspired by Islamic State were detained, and authorities urged parents to watch for signs of radicalisation among young people."
Using "Islamic extremism" and "Islamic State" foregrounds religion in describing the threat. This wording can connect terrorism primarily to Islam and encourage concern about Muslim-linked radicalisation, even while saying threat is "relatively low." It shapes readers to see religion as central to the risk.
"reports that Chinese officers have sought to recruit experts, academics, officials and people linked to law enforcement"
Listing these particular groups highlights recruitment of trusted professions. That selection increases perceived danger by suggesting infiltration of key social roles. The wording steers concern toward institutional vulnerability without noting scale or success rates.
"identified as the main driver" and "is described as increasing, with reports"
Both phrases use passive constructions that attribute claims to unspecified sources. This softens attribution and gives the text a neutral tone while avoiding naming who made the claim. It helps present strong assertions without showing the origin or evidence, reducing accountability for the statement.
Emotion Resonance Analysis
No emotional resonance analysis available for this item

