Adversary Intelligence — 2026-11-01

Russian Citizen Arrested in Poland on Espionage Charges After Photographing Railway Infrastructure

BLUFPoland's arrest of a Russian national with hundreds of thousands of railway infrastructure photographs across multiple countries points to a systematic reconnaissance effort that will prompt coordinated European counterintelligence responses.

Lower Silesian police said a 55-year-old Russian citizen was detained in Świdnica after a football-match security patrol noticed him in a parked Volkswagen near an unguarded rail crossing, and he carried professional photographic equipment used to shoot trains and rail infrastructure 12. Police reported that Central Cybercrime Bureau analysts found hundreds of thousands of similar files, including critical rail and transport sites "not only in Poland," along with several identity documents 12. He was charged under Article 130 §1 of the Criminal Code with photographing infrastructure intending to pass it to foreign intelligence, and a court ordered three months' custody; the offense carries a minimum of five years 1. Interior Ministry spokeswoman Karolina Gałecka said he came to Poland for work and that whether he acted alone or passed material on remains under investigation 1, while Meduza quoted coordinator Tomasz Siemoniak calling the case "exceptional" 3.

Analysis
The size and organization of the photographic archive points to deliberate pre-attack reconnaissance rather than hobby photography. Files covering sites "not only in Poland" mean the case could extend to other European rail operators and security services, and Polish services may work with foreign counterparts. Professional equipment and multiple identity documents fit a prepared collector, and Siemoniak's remark that Moscow prefers paid local agents makes a Russian citizen in this role unusual. Whether he worked alone or passed material to handlers is unresolved. He may instead have been a contractor or hobbyist, with the intent charge resting on prosecutors' inference from the volume and subject of the files. Confidence is moderate: two Polish outlets quote the same police communique, and nothing independent confirms the intelligence link.

4 sources