Officials said the attack occurred on September 23 in Wola Krobowska, approximately 40 kilometers south of the Polish capital, where the suspects allegedly set fire to infrastructure belonging to the satellite internet network.

The identities of the two suspects have not been disclosed in accordance with Polish privacy regulations.

Poland’s minister responsible for overseeing intelligence services, Tomasz Siemoniak, said authorities believe the attack was directed by Russian intelligence operatives as part of a broader campaign targeting European countries that support Ukraine.

“We have no doubt that Russian intelligence services are behind this act of sabotage,” Siemoniak said in a statement.

He alleged that Moscow has increasingly relied on individuals with criminal connections to carry out covert operations across Europe.

Polish Prime Minister Donald Tusk also condemned the incident, describing it in a post on X as “another act of hybrid warfare.”

The Starlink satellite internet system, operated by Elon Musk’s SpaceX, has become an important communications resource for Ukraine’s military since Russia launched its full-scale invasion in February 2022.

The attack has therefore raised additional concerns about the vulnerability of communications infrastructure in countries supporting Ukraine.

According to an Associated Press investigation, more than 210 incidents across Europe have been identified by Western officials as suspected sabotage or other hostile activities linked to Russia since the invasion began.

European security officials believe such operations are intended to weaken support for Ukraine, create fear and instability within European societies, and divert law enforcement resources toward investigating repeated security threats.

Authorities have also warned that Russian intelligence agencies frequently recruit intermediaries to carry out attacks, sometimes without the individuals fully understanding who is directing their activities.

Speaking Tuesday at a security conference in Warsaw, Siemoniak said Poland and other European nations were facing an increasingly persistent campaign of suspected Russian interference.

He described the operations as almost daily acts of subversion, warning that hostile activities were occurring regularly across the continent.

“There is not a week where activities do not happen,” Siemoniak said, adding that countries supporting Ukraine were particularly vulnerable.

According to the minister, Russia’s suspected covert operations in Poland intensified in early 2024, with operatives allegedly recruiting individuals through online messaging platforms such as Telegram.

He said the recruits were used to carry out attacks against civilian and commercial targets, including a shopping center.

Polish officials have not released further details about the evidence linking the two detained suspects to Russian intelligence or whether additional arrests are expected.

The latest allegations underscore growing security concerns across Europe as governments confront suspected sabotage, cyberattacks and other forms of hybrid warfare linked to Russia’s ongoing invasion of Ukraine.