UK Prime Minister Andy Burnham said Russia interfered in the 2016 referendum that took Britain out of the European Union, in podcast excerpts released on 11 October, the Associated Press reported. His remarks are believed to be the first time a British prime minister has publicly acknowledged such meddling.

Russia’s information war keeps running through Europe’s ballots. German security sources said in August that Moscow was escalating disinformation before state elections, and Ukraine’s Center for Countering Disinformation found more than 200 Russian fake news sites aimed at France last year.

One question, one clear answer

Burnham told The Rest Is Politics podcast that he asked his advisers whether Russia had interfered in the 2016 vote. He asked after taking office in July.

“I’ve had the clear answer that yes, there was,” he said.

He argued that such things must now be put clearly on the record. He did not say how Russia interfered or offer evidence, and Moscow has long denied interfering in foreign votes.

Burnham said he had discussed Russian interference with German Chancellor Friedrich Merz in Berlin the previous week. “You know he was saying to me that the AfD are clearly linked to Russia, funded I believe,” Burnham said, referring to Germany’s far-right Alternative for Germany party. Putting such interference on the record would help “voters in Germany and France understand that some of this politics is instigated via our enemies, namely Russia,” he added.

Years of silence

In 2020, Parliament’s Intelligence and Security Committee found that the government had actively avoided investigating whether Russia meddled in the referendum. The report noted open-source signs of Russian attempts to sway the Brexit campaign. The government, it said, had never looked for hard evidence.

The government rejected the committee’s call for a review.

“We have seen no evidence of successful interference in the EU Referendum,” it said.

That same year, London said Russian actors had almost certainly tried to interfere in the 2019 general election. The government said they did it by amplifying leaked UK-US trade documents online.

From 2019 to 2016

Three weeks ago, Burnham stopped short of this. At the UN General Assembly on 22 September, he said the Kremlin spends around £1.3 billion each year on manipulating information. That is roughly $1.7 billion at recent exchange rates. He cited evidence that Russian agencies tried to interfere in the 2019 general election, but he did not mention 2016.

In the same speech, he said Britain had already helped Moldova protect its elections from Russian interference.

Ukraine’s drone strikes on Russian tech giant Yandex thinned out social media bots, Ukrainian President Volodymyr Zelenskyy said on 12 October. Network data do show Yandex’s automated traffic collapsing after the strikes. Disinformation researchers say that traffic is search crawling, not trolls. A Ukrainian social media monitor told Euromaidan Press its own data show no clear drop in bot activity either.

Russian influence operations are a live threat to European votes. In August, the Matryoshka network fabricated news clips aimed at Sweden’s general election. German and French authorities flagged the same network targeting Germany’s local votes and French presidential hopeful Gabriel Attal. A way to switch such networks off would hand allies a new tool, which is why the claim needs testing.

The president’s claim

Addressing the Warsaw Security Forum by video link, Zelenskyy said that once Ukraine began answering Russia’s operation against Ukrainian data centers and its strikes reached Yandex, many social media platforms suddenly became a little easier to breathe on.

Many people noticed less hatred, discord, and provocation because there were fewer bots, he said. It was quite clear where those bots came from, he noted. Their disappearance once Yandex went down proves again that Europe is not the source of the problems, he added.

Lithuanian Prime Minister Mindaugas Sinkevičius said at the same forum that allies should ask Zelenskyy to strike more data centers in Russia, answering a question on how to protect their elections from interference.

Three data centers in four days

Drones first hit Yandex’s data center in Sasovo, Ryazan Oblast, on 8 October. Yandex said it shut the site down completely. The next day, a strike on its Kaluga site completely disabled several modules, the company said. Yandex calls Kaluga its largest data center, Russian science outlet T-Invariant noted.

Ukrainian drone maker Fire Point said its FP-1 long-range drones carried out that strike.

After the first strike, on Sasovo, a source at Yandex summed up the mood for The Bell: “Things are rotten. We keep working.”

Overnight on 11 October, drones hit the third site, in Vladimir. Yandex said it fully halted that data center too. Vladimir Oblast Governor Aleksandr Avdeev acknowledged an attack on “infrastructure” near the city. It started a fire and cut power to two substations serving 5,000 residents, he claimed.

Dima, have you tried turning it off and on again?

— Fire Point (@FirePointUA) October 11, 2026

What the traffic data show

Automated web requests from Yandex’s network fell to 0.4% of their two-week peak after the third strike, Cloudflare Radar data showed, Cybernews reported. That chart counts automated requests to websites, mostly from Yandex’s own search crawlers. It does not count social media posts.

The chart “has nothing to do with social media,” the Russian opposition analysis group Antibot4navalny wrote.

To those implying that Kremlin-controlled social media bot/troll farms became silent after Ukraine hit a Yandex data center, posting this CloudFare chart ( radar.cloudflare.com/bots/as13238 ):Hate to disappoint you all

— antibot4navalny | bot blocker | блокировщик ботов (@antibot4navalny.bsky.social) 2026-10-11T20:54:52.717Z

Russia’s overall bot traffic last week looked much like any other week. Yandex’s own figure began recovering on Sunday. Covert troll farms usually hide behind residential proxies, hacked devices, virtual private networks (VPNs), and Western cloud providers, the outlet added.

What Ukrainian social media shows so far

Yevhen Luzan tracks Ukrainian social media sentiment as an analyst at the Ukrainian nonprofit CAT-UA. Its daily reviews sample about 500 random posts. On 11 October, that sample showed an unusually small share of posts criticizing Ukraine’s authorities, he told Euromaidan Press. Accounts showing signs of bot activity made up only a few tenths of a percent of that criticism. That is within the margin of error.

The same day, though, US President Donald Trump’s deal for Russian diesel supplies dominated Ukrainian feeds. Luzan said a rally-around-the-flag effect could explain the shift, as outrage at Washington crowded out domestic stories.

“To state it definitively and draw a cause-and-effect link from this correlation would be too bold,” he said.

Across the wider pool of about 10,000 daily mentions, CAT-UA sees no significant drop in posting activity in recent days. The curve shows only the usual rises and dips around the start and end of the week, Luzan said.

“For now, even a hypothetical drop in bot farm activity dissolves entirely in the natural fluctuations of the information space,” he said.

How a crawler chart became a bot story

The claim that Russian social media bots fell by half is unproven and built on a misread chart, disinformation analyst Joohn Choe concluded in a fact-check. It traces back to an 8 October post by security researcher Jeremiah Fowler. That post said Russian bot traffic had dropped to 49%. On 11 October, radio reporter Jamie Dupree spread it on X. Tom’s Hardware then ran it under a headline calling the crawler traffic “Russian disinformation bot traffic,” wording it has since changed.

According to Cloudflare Data Explorer the amount of russian bot traffic has dropped to 49% after Ukraine struck a yandex data center. Could this disrupt the midterm elections in the US? pic.twitter.com/SRtMyjaV22

— Jeremiah Fowler Security Researcher (@yoda69) October 8, 2026

Ukrainian military analyst Tatarigami claimed that Texas separatist accounts with identical “Veteran, Christian, Father, MAGA” bios had gone quiet. He said Quebec separatists and Polish anti-EU accounts went quiet alongside them.

Polish military analyst Jarosław Wolski claimed that AfD’s online support fell 56%, posting a chart without naming its source. Another X user said “Polish” bots had vanished.

Zderusyfikowany internet (ukraińskie trafienia w centra Yandexa) nagle objawia cuda w socjalach: poparcie dla AfD w socjalmediach spadło o 56%. Mniej "polskich" kont szczujących na Ukraińców, mniej "ukraińskich" szczujących na Polaków, poparcie w sieci dla MAGA gwałtownie spadło… pic.twitter.com/zi4rwqNR9I

— Jarosław Wolski (@wolski_jaros) October 11, 2026

Poland has launched a nationwide security operation after three knife attacks at educational institutions left one woman dead and more than a dozen people injured. Police have detained 117 people amid a wave of online threats, while intelligence officials are examining whether Russian disinformation networks exploited the violence to spread panic.

Poland is confronting an unprecedented school security crisis after a succession of violent attacks by young people triggered widespread fear, school closures and a nationwide police mobilisation. By Sunday, 11 October, officers had detained 117 people and conducted nearly 64,000 security checks at educational establishments, as the authorities attempted to contain both genuine threats and an escalating campaign of intimidation on social media.

The crisis reached its height on Friday, 9 October, when warnings circulated about a supposed nationwide killing campaign known as “Bloody Friday”. Videos, threatening messages and lists of potential targets spread through TikTok, messaging platforms and school discussion groups, prompting parents to keep children at home and several local authorities to suspend classroom teaching.

Although police have found no evidence of an organised nationwide conspiracy, the violence that preceded the rumours was real. Three separate attacks took place between 7 and 10 October, while investigators are examining hundreds of other incidents involving threats or suspected criminal activity.

Two attacks that triggered nationwide panic

The first major incident occurred on Wednesday, 7 October, at a vocational school in Ostrołęka, north-east of Warsaw. A 19-year-old student armed with a machete attacked pupils, teachers and other people in and around the building, injuring nine victims before harming himself.

Investigators subsequently discovered a homemade explosive device inside his backpack. The suspect was arrested, and prosecutors brought nine charges against him, including attempted murder. The discovery of explosives raised further questions about the extent of his preparations and the possibility of a substantially higher death toll.

The following day, a 15-year-old former pupil entered a primary school in Leszczydół-Nowiny, near Wyszków, and attacked three members of staff with a knife. A 37-year-old caretaker died from her injuries, while two teachers, including the headteacher, were wounded.

According to investigators, the teenager wore a helmet-mounted camera, raising suspicions that he intended to record the assault. The official prosecution statement confirmed the victim’s death and the detention of the suspect.

The attacks were followed by threatening messages from other teenagers, including a video attributed to a 17-year-old in the Przasnysz district who claimed to be participating in a competition involving killings. Police subsequently detained him. In Sierpc, another 17-year-old was arrested after allegedly discussing plans for violence at school; officers discovered two knives.

Thousands of schools under police surveillance

The rumours produced an immediate reaction. Schools in Wyszków, Ciechanów, Pułtusk and other municipalities cancelled classroom teaching or introduced remote lessons. Elsewhere, parents independently withdrew their children, leaving some classrooms largely empty.

Police launched an extensive preventive operation, deploying additional officers around schools and investigating online threats.

According to the figures released on 11 October, the authorities had recorded 275 incidents requiring investigation, detained 117 people and carried out nearly 64,000 checks at schools, nurseries and other educational facilities.

The situation deteriorated further on Saturday, 10 October, when a 21-year-old student attacked three people at a post-secondary educational institution in Warsaw. Two 17-year-old girls and a 24-year-old woman were injured. One victim required hospital treatment, although none of the injuries was considered life-threatening.

Interior Minister Marcin Kierwiński subsequently stated that investigators had established no links between the recent attacks. The authorities nevertheless remain concerned about imitation offences, particularly where threatening material circulates among teenagers through closed online communities.

Russia’s possible role in spreading panic

The events have also raised questions about whether hostile foreign actors deliberately amplified the crisis. Tomasz Siemoniak, Poland’s minister responsible for coordinating the intelligence services, warned that Russian organisations routinely exploit domestic emergencies to spread disinformation and undermine confidence in public institutions.

In his statement on 9 October, Siemoniak acknowledged the possibility of foreign involvement but stressed the need for evidence before assigning responsibility.

There is, at present, no publicly established evidence that Moscow organised the school attacks or directed the subsequent threats. Nevertheless, the rapid circulation of alarming videos, fabricated warnings and unverified target lists illustrates how genuine violent incidents can be exploited to disrupt everyday life without further physical attacks.

The episode also presents a challenge for European regulators. Poland is examining measures against dangerous online content, while its existing obligations under the EU Digital Services Act provide a framework for addressing systemic risks associated with major platforms.

For Donald Tusk’s government, the immediate priority is preventing further attacks as schools reopen under heightened security. The longer-term challenge concerns the interaction between online radicalisation, copycat violence and disinformation capable of transforming isolated crimes into a national emergency.