Poland Detains Defense Ministry Employee on Suspicion of Spying for Russian and Belarusian Intelligence

Published
Written by:
Lore Apostol
Lore Apostol
Cybersecurity Writer
Key Takeaways
  • Espionage Allegations: A 60-year-old civilian employee of Poland's Ministry of National Defense has been detained on suspicion of spying for a foreign intelligence agency.
  • Foreign Intelligence Link: Polish officials have indicated the suspect was working with Russian and Belarusian intelligence services.
  • National Security Implications: The arrest highlights ongoing concerns about Russian hybrid warfare targeting Poland, a key NATO member.

The Military Counterintelligence Service (SKW) has detained an employee of the Ministry of National Defense on charges of espionage, intensifying concerns over Russian intelligence activities in the region. The suspect worked in the ministry's strategy and planning department and reportedly had access to documents related to military modernization projects.  

Investigation and Evidence Collection

Officials have stated that the civilian employee, not a high-ranking official, is suspected of collaborating with both Russian and Belarusian intelligence services. Reports say the individual is a  60-year-old Polish national who has worked at the ministry since the 1990s and was arrested at his workplace in Warsaw. 

According to a spokesperson for Poland's special services, investigators have collected extensive evidence confirming the detainee's espionage activities. Following the arrest, SKW officers searched the suspect's office and residence and seized electronic devices and data storage. 

The individual has been formally charged with espionage. While officials have been careful about releasing specific details during the ongoing investigation, they assert that the evidence indicates a betrayal of national interests in favor of a foreign intelligence service. 

Broader Geopolitical Context

This incident underscores the persistent threat to Poland's national security from state-sponsored actors. This arrest is not an isolated event. It occurs amid a heightened state of alert in Poland regarding what officials describe as Russian hybrid warfare tactics. 

In recent months, Polish authorities have detained dozens of individuals for alleged collaboration with Russian intelligence to carry out acts of sabotage and arson. Early last year, NoName057(16) and Z-Pentest attacked sewage treatment plants in Poland.

December reports highlighted that Ink Dragon expanded its cyberespionage campaign to European government networks. In November, the Russian-aligned RomCom was observed using SocGholish to deploy Mythic Agent on Ukraine supporters in a new campaign linked to GRU Unit 29155.


For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: