Poland Thwarts First Russian Attempt to Assassinate a US Citizen on NATO Territory

On August 13, 2026, Polish Prime Minister Donald Tusk revealed that the country's Internal Security Agency (ABW), working with police, had arrested a Russian national on August 7 who was recruited by Russian intelligence to assassinate a Ukrainian-American citizen in Warsaw . Tusk described the target as a man "inconvenient to the Putin regime" . The case is widely described as the first known instance of Russia ordering an attack on a U.S. citizen on NATO territory .

Key Details of the Foiled Assassination Plot

The Russian citizen was detained on August 7, 2026, by Poland's Internal Security Agency and police . He was acting on orders directly from Russian intelligence services . The intended target was a dual U.S.-Ukrainian citizen residing in Warsaw. Polish authorities have not publicly identified the intended target .

Tusk said the suspect had been recruited to "execute" a man who was "inconvenient from the point of view of the Putin regime" . He praised the operation as a "truly brilliant action" by Polish services . The suspect will be held in custody for three months, the Warsaw police said in a statement .

An Unprecedented Escalation on NATO Territory

Polish and Western officials stated this is the first confirmed plot by Russia to assassinate an American citizen on the soil of a NATO member state . Tusk said it was the first time "someone on the order of Russia" sought to attack a U.S. citizen in another NATO country . This represents a significant threshold crossing for the Kremlin's covert operations.

Intelligence Cooperation

Polish authorities credited the Internal Security Agency's work, and U.S. intelligence cooperation is widely understood to be part of the broader counter-intelligence framework between the two countries, though Tusk did not detail specific U.S. involvement in his public remarks . Tomasz Siemoniak, Poland's minister overseeing intelligence services, confirmed that the operation was carried out in cooperation with U.S. services . The Associated Press noted that the case underscores deep U.S.-Polish intelligence sharing on Russian threats .

The Broader Pattern of Russian Hybrid Attacks

Since Russia's 2022 full-scale invasion of Ukraine, documented hybrid attacks across Europe have surged sharply. One database records 146 incidents across 30+ countries — including sabotage, arson, assassination plots, and influence operations . The number of covert actions rose steeply from 2022 through 2024, with a relative lull in early 2025, before picking up again . One analysis found a 5.3x increase in hybrid warfare incidents between 2022 and 2024 .

The Center for Strategic and International Studies identified 34 incidents of arson and sabotage in 2024 alone, triple the 2023 figure and a sharp rise from just two in 2022 . The Associated Press has traced 145 incidents linked to Russia since February 2022, with operatives often recruiting local petty criminals for low-cost sabotage . Other tallies, such as one from the International Center for Counter-Terrorism (ICCT), place the total at 151 documented cases of "diversion, sabotage, arson, attempted bombings, and other hybrid attacks related to Russia" between February 2022 and February 2026 .

This Warsaw assassination plot represents a further escalation — moving from sabotage and arson to state-ordered murder of a U.S. citizen on allied territory.

Russia's Tactics and Recruitment

Research indicates that low-level agents used by Russian intelligence in these operations are predominantly male, in their mid-thirties, and drawn disproportionately from Ukrainian, Russian, Moldovan, and Bulgarian populations . The severity of incidents has escalated, with Russian intelligence services increasingly complementing cyber-attacks and information operations with physical sabotage and assassination attempts . The Associated Press reported that recruiters often approach targets through Telegram channels tied to the Wagner Group and to Russia's military and domestic intelligence services, the GRU and FSB, commissioning acts of arson and sabotage for a few thousand dollars per job .

Implications for European Security and NATO

The plot signals a significant escalation in Russia's willingness to conduct lethal operations against U.S. citizens on NATO territory, crossing a threshold that could trigger a stronger collective response under NATO's collective defense principle . It validates Poland's increasingly assertive counter-intelligence posture and deep operational cooperation with U.S. agencies. The case is likely to accelerate NATO's already expanding efforts to counter Russian hybrid warfare, including enhanced protection of nationals from allied states and more aggressive disruption of Russian intelligence networks in Europe.