Russian intelligence network charged in Lithuania
Lithuania announced the arrest of nine individuals on May 2, 2026, accused of planning murders and sabotage across Europe, attributing these actions to Russia's GRU. As of May 2, 2026, Lithuanian prosecutors have charged 13 individuals from various countries in connection with two attempted murders in Vilnius and five individuals with terrorism for allegedly acting on behalf of Russian military intelligence to plant incendiary devices on airplanes in 2024. The investigation, which began in early 2025, determined that the individuals acted in the interests of the GRU, with targets including Ukrainian journalists, an intelligence official, and a plant supplying radio wave scanners to Ukraine's army. Six foreign nationals from Spain, Colombia, Cuba, Russia, and Belarus face charges of participating in a terrorist group, attempting to commit a terrorist act, and financing terrorist activities, with potential sentences of up to 15 years in prison.
Timeline
Want updates on this thread?
Track this storyTimeline of developments
May 2026 — 1 developments
Lithuania announced the arrest of nine individuals accused of planning murders and sabotage across Europe, attributing these actions to Russia's GRU.
Lithuania announced the arrest of nine individuals accused of planning murders and sabotage across Europe, attributing these actions to Russia's GRU. The operation was triggered by the discovery of an Apple AirTag in a minority rights advocate's car, leading to the dismantling of a group suspected of surveillance of Greek military installations and an arson attack on military equipment in Bulgaria destined for Ukraine. The arrests were made on May 2, 2026.
April 2026 — 1 developments
Lithuanian prosecutors have charged 13 individuals from various countries in connection with two att…
Lithuanian prosecutors have charged 13 individuals from various countries in connection with two attempted murders in Vilnius, allegedly linked to Russia's GRU military intelligence agency. Ukrainian police stated that this group, described as a "Russian intelligence network," also targeted Ukrainian journalists and an intelligence official. The investigation, which began in early 2025, determined that the individuals acted in the interests of the GRU.
March 2026 — 1 developments
Lithuanian prosecutors have charged five individuals with terrorism for allegedly acting on behalf of Russian military intelligence to plant incendiary devices on airplanes in 2024.
Lithuanian prosecutors have charged five individuals with terrorism for allegedly acting on behalf of Russian military intelligence to plant incendiary devices on airplanes in 2024. An international investigation identified 22 individuals involved, with suspects accused of using delivery services to send four packages containing improvised incendiary devices. One package detonated at Leipzig Airport, and another caught fire in Poland.
January 2026 — 8 developments
Authorities in the UK, Lithuania, and Latvia have detained several individuals suspected of intellig…
Authorities in the UK, Lithuania, and Latvia have detained several individuals suspected of intelligence activities for Russia, uncovering a broader Russia-linked network planning arson attacks across various European countries.
The targeted company in the attempted arson attack was identified as UAB TVC Solutions, which produces mobile radio frequency analysis stations.
The targeted company in the attempted arson attack was identified as UAB TVC Solutions, which produces mobile radio frequency analysis stations.
Lithuanian authorities have accused Russia's GRU military intelligence service of orchestrating the …
Lithuanian authorities have accused Russia's GRU military intelligence service of orchestrating the sabotage attacks, specifically targeting a plant supplying radio wave scanners to Ukraine's army. The attacks were also aimed at destabilizing Lithuania and undermining support for Ukraine, with targets including transportation and energy infrastructure.
Lithuanian prosecutors have charged six foreign nationals with preparing a terrorist act against a c…
Lithuanian prosecutors have charged six foreign nationals with preparing a terrorist act against a company supplying equipment to the Ukrainian Armed Forces, allegedly under the direction of Russian military intelligence. This follows an earlier accusation that Russian military intelligence orchestrated an arson attack on an IKEA store in Vilnius in May 2024, labeling it an "act of terrorism." A broader Russia-backed operation involving arson attacks across Europe has also led to 15 people being charged.
Lithuanian authorities formally brought charges against six foreign nationals (from Spain, Colombia,…
Lithuanian authorities formally brought charges against six foreign nationals (from Spain, Colombia, Cuba, Russia, and Belarus) for their alleged involvement in the Russian-directed sabotage attacks. They face charges of participating in a terrorist group, attempting to commit a terrorist act, and financing terrorist activities, with potential sentences of up to 15 years in prison.
Lithuanian prosecutors charged three men, holding Russian or dual Russian and Estonian citizenship, …
Lithuanian prosecutors charged three men, holding Russian or dual Russian and Estonian citizenship, with pouring red paint over a monument to an anti-Soviet resistance leader, an act attributed to Russian military intelligence.
The indictment was submitted to the Šiauliai District Court.
The indictment was submitted to the Šiauliai District Court.
The indictment against the six foreign nationals was drawn up.
The indictment against the six foreign nationals was drawn up.
October 2025 — 3 developments
Russian courts have sentenced Lithuanian mercenary Povilas Adomas Limontas to 6.
Russian courts have sentenced Lithuanian mercenary Povilas Adomas Limontas to 6.5 years in prison in absentia for fighting in Ukraine, placing him on an international wanted list. Criminal cases have also been sent to court against other foreign 'legionnaires' from Colombia, Sweden, and Japan.
A gang involved in a Russian-ordered arson attack on a London warehouse that was aiding Ukraine has been sentenced in the UK.
A gang involved in a Russian-ordered arson attack on a London warehouse that was aiding Ukraine has been sentenced in the UK. The group had also plotted further attacks and an attempted kidnapping. This sentencing follows Lithuania's charging of 15 people with terrorist offenses related to detonating parcels.
In October 2025, fifteen individuals were charged with terrorist offenses in Lithuania for the detonation of DHL and DPD parcels that caused fires in Poland, Germany, and the UK.
In October 2025, fifteen individuals were charged with terrorist offenses in Lithuania for the detonation of DHL and DPD parcels that caused fires in Poland, Germany, and the UK. Prosecutors attributed these acts to Russia's military intelligence services, suggesting they were a dry run for sabotage.
September 2025 — 1 developments
Lithuanian prosecutors have charged 15 individuals in connection with an alleged Russia-backed network that planned arson attacks across Europe.
Lithuanian prosecutors have charged 15 individuals in connection with an alleged Russia-backed network that planned arson attacks across Europe. The suspects are accused of sending homemade explosive devices to EU countries and the UK on behalf of Russian secret services, with the plot reportedly led by individuals tied to Russia's GRU military intelligence.
March 2025 — 2 developments
Three Ukrainian nationals have been convicted in Poland for their involvement in a Russian-linked arson campaign across Europe, including Lithuania.
Three Ukrainian nationals have been convicted in Poland for their involvement in a Russian-linked arson campaign across Europe, including Lithuania. Separately, Europol warned of Russia's increasing use of criminal networks for politically motivated sabotage, with Lithuanian prosecutors attributing a summer 2024 arson attack on an IKEA store in Vilnius to Russia's GRU.
Lithuanian prosecutors have attributed an arson attack on an Ikea store in Vilnius in May 2024 to Russia's GRU military intelligence service, labeling it an act of terrorism.
Lithuanian prosecutors have attributed an arson attack on an Ikea store in Vilnius in May 2024 to Russia's GRU military intelligence service, labeling it an act of terrorism. Two Ukrainian citizens are suspects in the case, with one detained in Lithuania and another in Poland.
December 2024 — 1 developments
Lithuanian investigators concluded there was no 'unlawful interference' in a recent DHL cargo plane crash near Vilnius Airport, dispelling initial suspicions of Russian sabotage.
Lithuanian investigators concluded there was no 'unlawful interference' in a recent DHL cargo plane crash near Vilnius Airport, dispelling initial suspicions of Russian sabotage. Preliminary analysis of flight data and evidence at the crash site revealed no foul play.
October 2024 — 1 developments
An international journalistic investigation linked sabotage acts in Lithuania and Poland to Russia's 390th GRU intelligence point in Kaliningrad.
An international journalistic investigation linked sabotage acts in Lithuania and Poland to Russia's 390th GRU intelligence point in Kaliningrad. Lithuanian prosecutors also announced the detention of a group, including Ukrainian (with Russian passport) and Lithuanian citizens, who planned four hybrid terror acts.
September 2024 — 4 developments
A Cuban citizen, believed to have assessed the site after the second attempt, was detained in Šiauliai while attempting to leave Lithuania.
A Cuban citizen, believed to have assessed the site after the second attempt, was detained in Šiauliai while attempting to leave Lithuania.
A second attempted arson attack took place at the same Šiauliai facility.
A second attempted arson attack took place at the same Šiauliai facility. A Russian citizen and a Belarusian citizen, who had traveled from Spain, allegedly carried out the arson, but the materials failed to ignite the equipment.
The two suspects from the first arson attempt were detained in Riga, Latvia, and subsequently extradited to Lithuania.
The two suspects from the first arson attempt were detained in Riga, Latvia, and subsequently extradited to Lithuania.
The first attempted arson attack occurred in Šiauliai, Lithuania, targeting TVC Solutions, a company manufacturing mobile radio spectrum analysis stations for Ukrainian forces.
The first attempted arson attack occurred in Šiauliai, Lithuania, targeting TVC Solutions, a company manufacturing mobile radio spectrum analysis stations for Ukrainian forces. Two suspects, a Spanish citizen and a dual Spanish-Colombian national, fled after being startled by passersby.