Polish authorities have arrested a Ukrainian citizen accused of trying to assassinate a representative of Ukraine’s defense industry near Kyiv on behalf of Russian intelligence, in the latest of several cases in which European agencies say Moscow has used recruited proxies to reach individuals tied to Ukraine’s war effort. The suspect, identified under Polish privacy rules as Serhii P., allegedly placed an improvised explosive device beneath a car used by the intended victim in Irpin, west of Kyiv. The device was designed to be detonated remotely using a mobile phone but failed to trigger, Poland’s Internal Security Agency said, according to Reuters. The intended victim has not been publicly identified.
Polish authorities said the suspect had been recruited by Russian intelligence and fled to Poland after the attempt failed. He was arrested in Warsaw and charged with attempted murder using explosives and illegal possession of explosive materials, and faces at least 15 years in prison or a possible life sentence if convicted. The Internal Security Agency said the case illustrates how Russian intelligence services conduct operations across national borders using recruited individuals who can move between countries. Russia has repeatedly denied Western accusations that its intelligence services conduct sabotage operations in Europe.
The arrest follows a separate case disclosed in Poland earlier this month. Prime Minister Donald Tusk said authorities detained a Russian citizen on August 7 who had allegedly been recruited by Russian intelligence to kill a dual Ukrainian-American citizen in Warsaw. Tusk described it as the first known Russian-directed attempt to kill a U.S. citizen on the territory of another NATO member. Polish authorities have not said the two cases were operationally connected. AP reporting on the Warsaw assassination case
Defense-industry executives supporting Ukraine have previously emerged as alleged Russian targets. In 2024, U.S. intelligence uncovered what officials described as a Russian plan to assassinate Armin Papperger, chief executive of Rheinmetall, one of Europe’s largest weapons manufacturers and a major supplier to Ukraine. U.S. officials said the Papperger plot was the most advanced in a series of alleged Russian plans targeting European defense-industry executives. Reuters reporting on the Papperger assassination plot
More recently, Stefan Thumann, head of German drone manufacturer Donaustahl, has said he was placed under protection after authorities identified a concrete threat to his life. German reporting this month said Novichok nerve agent may have been considered as a method, citing a lawmaker briefed on the case, although that detail has not been established in a public German prosecutorial finding. Thumann has said he regards the threat as a confrontation with Russian military intelligence. Reporting on the alleged Thumann assassination plot
Taken together, the cases suggest that people involved in sustaining Ukraine’s weapons supply are becoming targets alongside factories, logistics networks and infrastructure. Threatening senior defense-industry figures can disrupt specialized expertise and decision-making while forcing companies and governments to devote additional resources to personal security.
The Irpin case adds another dimension because the alleged attack crossed the boundary between Russia’s war inside Ukraine and its covert operations elsewhere in Europe. The suspect allegedly planted the bomb inside Ukraine and then fled into Poland, a NATO and Schengen-area state, where he was eventually arrested. The plot was also not stopped before the device was planted: according to the Polish account, the assassination failed because the bomb malfunctioned rather than because authorities intercepted the operation beforehand.
That makes the case another warning about the reach of Russia’s alleged proxy model. Operatives do not need an obvious institutional connection to Moscow to conduct potentially lethal attacks, and suspects can move between a wartime security environment and European states before intelligence agencies identify them.
