Poland has launched a nationwide security operation after three knife attacks at educational institutions left one woman dead and more than a dozen people injured. Police have detained 117 people amid a wave of online threats, while intelligence officials are examining whether Russian disinformation networks exploited the violence to spread panic.

Poland is confronting an unprecedented school security crisis after a succession of violent attacks by young people triggered widespread fear, school closures and a nationwide police mobilisation. By Sunday, 11 October, officers had detained 117 people and conducted nearly 64,000 security checks at educational establishments, as the authorities attempted to contain both genuine threats and an escalating campaign of intimidation on social media.

The crisis reached its height on Friday, 9 October, when warnings circulated about a supposed nationwide killing campaign known as “Bloody Friday”. Videos, threatening messages and lists of potential targets spread through TikTok, messaging platforms and school discussion groups, prompting parents to keep children at home and several local authorities to suspend classroom teaching.

Although police have found no evidence of an organised nationwide conspiracy, the violence that preceded the rumours was real. Three separate attacks took place between 7 and 10 October, while investigators are examining hundreds of other incidents involving threats or suspected criminal activity.

Two attacks that triggered nationwide panic

The first major incident occurred on Wednesday, 7 October, at a vocational school in Ostrołęka, north-east of Warsaw. A 19-year-old student armed with a machete attacked pupils, teachers and other people in and around the building, injuring nine victims before harming himself.

Investigators subsequently discovered a homemade explosive device inside his backpack. The suspect was arrested, and prosecutors brought nine charges against him, including attempted murder. The discovery of explosives raised further questions about the extent of his preparations and the possibility of a substantially higher death toll.

The following day, a 15-year-old former pupil entered a primary school in Leszczydół-Nowiny, near Wyszków, and attacked three members of staff with a knife. A 37-year-old caretaker died from her injuries, while two teachers, including the headteacher, were wounded.

According to investigators, the teenager wore a helmet-mounted camera, raising suspicions that he intended to record the assault. The official prosecution statement confirmed the victim’s death and the detention of the suspect.

The attacks were followed by threatening messages from other teenagers, including a video attributed to a 17-year-old in the Przasnysz district who claimed to be participating in a competition involving killings. Police subsequently detained him. In Sierpc, another 17-year-old was arrested after allegedly discussing plans for violence at school; officers discovered two knives.

Thousands of schools under police surveillance

The rumours produced an immediate reaction. Schools in Wyszków, Ciechanów, Pułtusk and other municipalities cancelled classroom teaching or introduced remote lessons. Elsewhere, parents independently withdrew their children, leaving some classrooms largely empty.

Police launched an extensive preventive operation, deploying additional officers around schools and investigating online threats.

According to the figures released on 11 October, the authorities had recorded 275 incidents requiring investigation, detained 117 people and carried out nearly 64,000 checks at schools, nurseries and other educational facilities.

The situation deteriorated further on Saturday, 10 October, when a 21-year-old student attacked three people at a post-secondary educational institution in Warsaw. Two 17-year-old girls and a 24-year-old woman were injured. One victim required hospital treatment, although none of the injuries was considered life-threatening.

Interior Minister Marcin Kierwiński subsequently stated that investigators had established no links between the recent attacks. The authorities nevertheless remain concerned about imitation offences, particularly where threatening material circulates among teenagers through closed online communities.

Russia’s possible role in spreading panic

The events have also raised questions about whether hostile foreign actors deliberately amplified the crisis. Tomasz Siemoniak, Poland’s minister responsible for coordinating the intelligence services, warned that Russian organisations routinely exploit domestic emergencies to spread disinformation and undermine confidence in public institutions.

In his statement on 9 October, Siemoniak acknowledged the possibility of foreign involvement but stressed the need for evidence before assigning responsibility.

There is, at present, no publicly established evidence that Moscow organised the school attacks or directed the subsequent threats. Nevertheless, the rapid circulation of alarming videos, fabricated warnings and unverified target lists illustrates how genuine violent incidents can be exploited to disrupt everyday life without further physical attacks.

The episode also presents a challenge for European regulators. Poland is examining measures against dangerous online content, while its existing obligations under the EU Digital Services Act provide a framework for addressing systemic risks associated with major platforms.

For Donald Tusk’s government, the immediate priority is preventing further attacks as schools reopen under heightened security. The longer-term challenge concerns the interaction between online radicalisation, copycat violence and disinformation capable of transforming isolated crimes into a national emergency.

The European Commission is preparing proposals to impose tighter visa restrictions on Russian citizens entering the Schengen area, with new measures expected to be presented in January 2027 following pressure from several member states concerned about Russia’s expanding hybrid operations across Europe.

Poland, Sweden and Estonia are among the countries demanding a tougher approach to Russian visitors, particularly former military personnel who fought in Ukraine. The proposals could affect hundreds of thousands of Russian nationals who continue to receive visas for travel to the European Union despite restrictions introduced following Moscow’s full-scale invasion of Ukraine in February 2022.

According to a report published on Sunday, EU officials are finalising plans to address vulnerabilities in the Schengen visa system, which governments increasingly regard as a potential entry point for individuals involved in intelligence operations, organised crime and acts of sabotage.

Swedish Justice Minister Gunnar Strömmer said the Commission was working towards a January announcement, although Stockholm would prefer an earlier decision. He told Politico that vulnerabilities in the existing arrangements could be exploited by hostile actors.

The initiative is expected to feature in discussions surrounding the Foreign Affairs Council meeting on 12 October, when ministers will examine Russia’s intensifying hybrid campaign against EU member states.

Schengen visas remain a security concern

Despite the deterioration in relations between Brussels and Moscow, Russian citizens continue to receive substantial numbers of Schengen visas. Approximately 478,000 tourist visas were reportedly issued to Russian nationals in 2025, including a significant proportion allowing multiple entries.

The figures have renewed questions about whether existing screening arrangements adequately reflect the security environment created by Russia’s war against Ukraine.

In September 2022, the EU suspended its visa facilitation agreement with Russia, ending preferential treatment and introducing stricter application procedures, additional documentation requirements and more restrictive conditions for multiple-entry visas.

However, the decision did not amount to a general prohibition on Russian tourism. National authorities retained considerable discretion over applications, producing differences in how individual Schengen countries handle Russian visitors.

The Commission’s existing visa guidelines also preserve access for certain categories of travellers, including journalists, political dissidents, civil society representatives and people travelling for essential family reasons.

The new initiative would therefore concern not only the number of visas issued but also the extent to which national screening decisions can affect the security of other Schengen countries. Under the Schengen system, a visa issued by one participating state generally permits its holder to travel throughout the area.

Estonia calls for restrictions on former Russian soldiers

Estonia has taken a particularly forceful position, proposing an EU-wide entry ban targeting former members of the Russian armed forces who participated in the invasion of Ukraine. Estonian Foreign Minister Margus Tsahkna estimates that approximately 650,000 former Russian combatants could fall within the category of individuals requiring closer scrutiny.

Tallinn has advocated individual entry restrictions rather than relying exclusively on broader measures covering Russian nationals generally. Tsahkna warned that former soldiers, particularly those with combat experience and connections to Russian intelligence services, could present a serious security challenge if they entered European countries.

He suggested that Moscow could exploit former combatants to penetrate organised criminal networks or facilitate violent operations against European targets. These assessments remain security warnings rather than evidence that Russian veterans as a group are involved in such activities.

A coordinated European policy would also seek to prevent individuals refused entry by one member state from exploiting differences in national visa procedures elsewhere.

Restrictions on Russian diplomats also under consideration

The visa proposals form part of a wider effort to restrict the activities of Russian nationals whose presence in Europe may present security risks. EU foreign policy chief Kaja Kallas has previously indicated that member states are considering tighter controls on the movement of Russian diplomats within Schengen, alongside restrictions on visas for former combatants and a reduction in Russian tourism.

One proposal would prevent Russian diplomatic personnel from travelling beyond the member state in which they are accredited. Such restrictions would complicate cross-border activities by diplomatic officials suspected of conducting intelligence operations under official cover.

The issue has acquired greater urgency as European governments report an expanding pattern of Russian-linked sabotage, including suspected arson attacks, cyber operations and attempts to disrupt critical infrastructure.

Migration Commissioner Magnus Brunner acknowledged that the initial decline in visa issuance to Russian nationals had levelled off. He urged member states to reduce the number of visas granted and to strengthen scrutiny of applicants.

January proposals will test EU consensus

The immediate question is whether member states can agree on common restrictions that go beyond the existing visa framework. An outright prohibition on Russian tourism would represent a significant departure from the current approach, under which national governments retain responsibility for individual visa decisions.

More narrowly targeted measures against former combatants could prove easier to justify on security grounds, although identifying eligible individuals would require reliable information and cooperation between national authorities. The Commission has yet to publish its proposals, and the precise legal instruments under consideration remain unclear.

Foreign ministers meeting on Monday will discuss Russia’s hybrid campaign and possible European responses. The Council’s published agenda places the issue in the context of Moscow’s continuing aggression against Ukraine.

Whether the Commission ultimately proposes new binding restrictions or stronger common guidelines, the central difficulty remains the same: a Schengen system built around common freedom of movement must accommodate increasingly different national assessments of the security risks associated with travel from Russia.

Three armed men accompanying at least 20 migrants from Belarus threatened Latvian soldiers and attempted to force the group across the frontier, according to Latvia’s National Armed Forces.

Hours later, masked intruders crossed into Latvia, damaged an electrical distribution unit and stole surveillance cameras before retreating into Belarus.

Latvia has reported an unusually aggressive incident on its border with Belarus in which armed, masked men threatened Latvian troops during an attempted migrant crossing, followed several hours later by an incursion targeting surveillance infrastructure.

The confrontation began on Monday evening when at least 20 people approached the Latvian border from Belarus accompanied by three masked men. Latvia’s National Armed Forces said the escorts were armed, issued threats to Latvian soldiers and actively drove the migrants towards the frontier. Latvian troops prevented the group from entering the country.

Several hours later, masked individuals crossed from Belarus into Latvian territory and targeted equipment used to monitor the border. Interior Minister Jānis Dombrava said they damaged an electrical distribution cabinet and removed surveillance cameras before returning across the frontier ahead of the arrival of a Latvian border-guard unit. Latvian authorities have not publicly identified the intruders or established whether all of those involved in the second incident were the same men who had earlier accompanied the migrants.

Dombrava described the events as markedly more aggressive than previous episodes on the frontier. He warned that Belarus should understand that incidents of this kind could have “more serious consequences” for the country.

The episode comes amid sustained pressure on Latvia’s 172km border with Belarus. According to the Latvian State Border Guard’s latest figures, 21 people were prevented from crossing illegally from Belarus on Tuesday, taking the total number stopped at that frontier since the beginning of 2026 to 11,946.

Latvia has for several years treated irregular migration from Belarus not simply as an immigration issue but as a security operation. Riga accuses the Belarusian authorities of deliberately facilitating migrant movements towards the EU border as a means of exerting political pressure.

In January, the Latvian National Armed Forces published what it described as evidence of Belarusian state involvement in organising illegal crossings. The military said documented cases included migrants being transported in Belarusian military vehicles and Belarusian officials participating in operations to direct people towards Latvia. That earlier material does not, however, establish the identities or affiliation of those involved in this week’s armed confrontation.

Pressure on the frontier intensified during the summer. In July, Latvian soldiers used tear gas and fired a warning shot when a group attempting to enter from Belarus refused orders to withdraw and, according to Latvian authorities, threw logs towards security personnel.

The methods used to circumvent the fortified border have also become more elaborate. In August, border guards found Latvia’s first known tunnel used for an illegal crossing from Belarus after intercepting 15 people near Skrudaliena. A second tunnel was discovered nine days later near Krāslava after another 28 people crossed the frontier. The State Border Guard said both incidents formed part of the continuing pressure on Latvia’s eastern border.

Riga responded in August by launching Operation VILKATIS, bringing together border guards, police and the armed forces under a co-ordinated security operation. Surveillance drones and other military capabilities have been deployed to reinforce monitoring of the frontier.

On Tuesday, the same day Latvian authorities disclosed the latest confrontation, the government extended Operation VILKATIS until 31 December. The Cabinet described the instrumentalisation of migration by Belarus as a hybrid threat and said additional resources would continue to be used along the eastern border.

The involvement of armed escorts changes the immediate security calculation for Latvian personnel. Previous incidents have largely centred on migrants, smugglers and attempts to bypass physical barriers. This week’s episode included direct threats against serving soldiers, followed by an unauthorised crossing and deliberate interference with border-monitoring equipment.

Latvia has not publicly attributed the operation to a particular Belarusian military, security or border agency. The account released by Riga therefore establishes an armed incident originating from Belarusian territory, but not yet who ordered or organised it. For Latvia, however, it adds another element to a border that is already being managed as part of the country’s wider response to hybrid threats on NATO and the EU’s eastern flank.

Main Image: By Saeima – https://www.flickr.com/photos/saeima/53117747287/, CC BY-SA 2.0, https://commons.wikimedia.org/w/index.php?curid=136391897