Baltic Security Monitor | Material Update
Event: 23 September 2026, 21:07 local time · Caught retrospectively in the 25 September cycle

What happened

On Wednesday evening, 23 September, at around 21:07 local time, a fire broke out at a Starlink satellite ground station in Wola Krobowska, in the Mazovia region roughly 50 kilometres south of Warsaw. The property owner alerted emergency services; three fire brigade units responded and extinguished flames in the station's power-distribution cabinet, which also damaged the facility's backup generator. No injuries were reported, and the station was back online the same day.

The site is operated by Exatel, Poland's state-owned telecommunications company. Deputy Prime Minister and Minister of Digital Affairs Krzysztof Gawkowski told broadcasters the station is part of the infrastructure carrying internet traffic through Poland, including to Ukraine. He described the fire as arson aimed at critical telecommunications infrastructure and said the pattern resembled Russian hybrid-warfare tactics, while stopping short of a formal sabotage designation.

Investigation: two competing readings, no conclusion yet

Official assessments diverge. Gawkowski spoke of arson and did not rule out a sabotage operation. Jacek Dobrzyński, spokesman for Poland's minister-coordinator of special services, urged caution, saying it is too early to classify the fire as sabotage and that investigators are weighing both deliberate arson and an electrical short circuit. Prime Minister Donald Tusk likewise avoided a definitive classification. Poland's Internal Security Agency (ABW) and police, including the Central Investigation Bureau, are involved in the case.

The split in early public statements about the same incident — from "an element of hybrid war" to "possibly a short circuit" — is a familiar pattern in the first 24 to 48 hours after such events, when political-level reaction typically outruns forensic findings.

Why it matters for Ukraine and the region

Polish government background material identifies the Wola Krobowska station, together with a gateway near Kaunas, Lithuania, as ground infrastructure serving users across Central Europe and satellites operating over Ukraine. This is not a peripheral node — it sits within the resilience chain of connectivity that supports Ukraine.

The incident lands alongside an updated Danish intelligence assessment warning that Russian hybrid operations are increasingly shifting from intimidating governments toward physically disrupting European support reaching Ukraine. Denmark's PET and its Defence Intelligence Service (DDIS) have repeatedly reported, through 2025 and 2026, on preparations for sabotage against Danish defence firms tied to Ukraine assistance, and on Russian efforts to gather intelligence on critical infrastructure across Europe.

BSM analysis: The timing and thematic overlap with the Danish warnings are notable but not, by themselves, evidence of Russian involvement in this specific fire. They do place the incident in a wider pattern: Poland has already seen incidents targeting infrastructure connected to Ukraine support with varying degrees of confirmed Russian involvement — from the September 2026 fire at the WB Electronics drone factory near Skarżysko-Kamienna, which the interior minister called sabotage even during the early investigation, to the 2024 Marywilska shopping-centre fire in Warsaw, which a year-long probe later formally attributed to Russian intelligence services. This track record shapes the prior with which Polish officials and the public read new incidents of this kind — but each case still requires its own evidentiary basis.

Regional context

On the same day the fire broke out, a Russian helicopter briefly entered Polish airspace — a separate incident that adds to a wider pattern of heightened activity along Poland's border through the summer and autumn of 2026, including July's case of a Russian missile landing in a field in eastern Poland. No evidence currently links these events to the Wola Krobowska fire.

Bottom line

The material change here is physical damage to communications infrastructure on NATO territory that directly touches connectivity to Ukraine, combined with an official investigation into possible deliberate arson. That goes beyond prior intelligence warnings about threats to such infrastructure — there is now a concrete incident. Calling it "Russian sabotage" at this stage would outrun what Polish investigators have themselves established.

The next material development would be a forensic finding of deliberate arson, the identification or arrest of suspects, evidence of foreign direction, or disclosure of a broader operation against communications infrastructure. Until then, BSM withholds a sabotage classification.

Baltic Security Monitor (osint-baltic.com) — an analytical publication covering security on NATO's northeastern flank.
Compiled from open sources: Reuters, Notes from Poland, TVN24, Polsat News, Interia, Rzeczpospolita, European Pravda.