Russia Exploits School Knife Attacks for Disinformation

Poland reported three school-related incidents in the Mazovia region over three days. A 15-year-old former pupil attacked a primary school in Leszczydół-Nowiny, killing a 37-year-old janitor and injuring two people. A 19-year-old attacked people with a machete-like knife at a school in Ostrołęka, injuring nine. Police also detained a 17-year-old in Sierpc over an alleged plan to attack his school.

The incidents were not officially described as one coordinated operation. Interior Minister Marcin Kierwiński said authorities found no concrete evidence linking them. Investigators also found no evidence of an online challenge encouraging violence.

Defense Minister Władysław Kosiniak-Kamysz said hostile actors sought to exploit the attacks afterward. A military cyber defense report pointed to a major disinformation campaign intended to spread panic. He did not establish that Russia carried out the attacks, but said Moscow routinely exploits crises.

Disinformation is false or misleading information deliberately spread to influence what people believe or do. It differs from an honest mistake because the message is used to deceive, manipulate, or create a desired reaction. In a crisis, people often seek information quickly, before facts are complete.

Rumors can then spread claims about additional attacks, hidden victims, or an alleged online challenge. Repeated posts may make those claims seem credible even without evidence. Fear can lead parents to keep children home, schools to close, and authorities to divert resources toward unconfirmed threats. Poland’s officials said a major campaign was intended to spread panic after the attacks.

The article also gives a flood example. After southwestern Poland’s September 2024 floods, false claims that hundreds had died circulated online, although the article reports nine deaths. This shows how misleading claims can magnify a real tragedy and complicate public response.

Poland mounted a nationwide security response after the attacks and online rumors. By noon Friday, police had inspected 15,000 educational institutions and detained 19 people. By 5 p.m., the figures had risen to nearly 35,000 institutions inspected and 59 people detained.

Around 24,000 police officers, supported by municipal guards, monitored schools and nearby areas throughout the day. Cybercrime officers and Poland’s Internal Security Agency also watched online activity. Police responded to 172 incidents involving reasonable suspicion of criminal activity and continued internet monitoring around the clock.

These figures show how quickly a local series of attacks became a national security concern. The detained people were not all accused of planning attacks; officials said most early cases involved irresponsible behavior by young people. The inspections and patrols were intended to identify credible threats while reducing fear around schools.

The attacks and rumors changed daily life for schools and families, especially in Poland’s Mazovia region. Authorities in Wyszków municipality closed primary schools and kindergartens on Friday. Elsewhere in the region, schools canceled classes or switched to remote learning. These measures reduced immediate exposure but disrupted lessons, childcare, and work routines.

Parents also faced uncertainty because rumors of further attacks circulated online. Those reports fueled anxiety, even though investigators found no evidence of an online challenge encouraging violence. Interior Minister Marcin Kierwiński urged parents to rely only on verified information.

Security measures expanded beyond closures. Prime Minister Donald Tusk called for police to patrol every school in the country at least once a day. Officers monitored schools, nearby areas, and online activity. The response shows how violence in a generally safe country can affect communities far beyond the original locations, especially when unverified claims spread quickly.

Polish authorities found no confirmed evidence that an online challenge encouraged the school violence. Interior Minister Marcin Kierwiński said investigators had analyzed all electronic devices seized during the operation. As of Friday, they had found no proof of such a challenge among young people.

Authorities also said there was no concrete evidence linking the three incidents themselves. Defense Minister Władysław Kosiniak-Kamysz did not establish direct Russian involvement in carrying out the attacks. His claim concerned what happened afterward: a military cyber defense report indicated that hostile actors sought to exploit the crisis through disinformation.

That distinction matters. The reported violence was investigated separately from the information campaign surrounding it. Officials warned that exploiting a real crisis can spread panic without proving that the exploiter caused the original event. Kierwiński urged people to rely on verified information while investigations and online monitoring continued.

Exploiting a crisis means using an existing emergency to achieve another objective. The exploiter does not need to cause the original violence. Instead, it can spread misleading claims, exaggerate danger, or present unrelated events as connected. A frightened public may then react in ways that increase disruption.

In Poland, officials linked a major disinformation campaign to the period after the school attacks. Rumors of further attacks circulated online, and claims about an online challenge were discussed even though investigators found no evidence supporting them. Such messages can make a limited crisis seem larger and harder to understand.

Kosiniak-Kamysz said this pattern was a longstanding feature of Moscow’s strategy and cited false death claims after Poland’s September 2024 floods. He did not say Russia caused the school attacks. The reported response focused on identifying threats, monitoring the internet, and preventing panic from spreading.

During an emergency, people need timely information, but early reports may be incomplete or wrong. Verified information helps the public separate confirmed events from rumors. This is especially important when safety decisions affect children, schools, and entire communities.

The Polish case shows the risk clearly. Rumors about further attacks increased parental anxiety, while investigators found no evidence of an online challenge linking the incidents. If people share such claims without checking them, fear can spread faster than facts. Schools may close, families may change routines, and police may have to investigate reports that are not credible.

Media literacy means checking who made a claim, what evidence supports it, and whether reliable authorities confirm it. Kierwiński urged parents to rely exclusively on verified information. Careful source-checking cannot remove all uncertainty, but it can limit panic and help resources focus on genuine threats.