In a statement, the ministry said Poland’s online information space is being continuously monitored by security agencies, which are in regular contact with major social media platforms.
According to officials, false narratives are being identified and blocked, and the public has been urged to treat any information about the incidents with particular caution, especially when they appear on social media.
The ministry called on users to check the source of any information before sharing it and not to pass on material from unverified accounts.
It also warned against reacting emotionally to photos or videos, noting that such material may be edited, falsified or taken from completely different situations than their descriptions suggest.
Officials said that Polish services responsible for public safety are providing verified and confirmed information on an ongoing basis and reminded citizens that suspicious content can be reported via a dedicated government website run by NASK, the state research institute responsible for cybersecurity.
According to the ministry, reports about the railway sabotage quickly spread into Russian media and onto Telegram channels, a popular messaging platform often used for propaganda.
These outlets increasingly use the incidents in their messaging about the war in Ukraine.
Russian-language and pro-Russian narratives have focused on portraying the sabotage as a sign of deepening internal tensions in Europe and as the work of a supposed "war party" within the European Union.
In many messages, Poland is depicted as a country provoking incidents in order to later accuse Russia and justify further military support for Ukraine.
At the same time, suggestions have been circulated that the sabotage could have been carried out by "Polish partisans," anarchists, Western agents or other unnamed saboteurs.
Some Russian media also referred to Germany, implying that Berlin might be sabotaging military deliveries to Ukraine as revenge for the Nord Stream 2 gas pipeline explosion, which was of economic importance to Germany.
Other false stories recalled earlier attacks on infrastructure in Germany, France and the Czech Republic, claiming that Europe is now a victim of chaos supposedly created by its own support for Ukraine.
The ministry said the dominant thesis in Russian messaging is that sabotage is being carried out by citizens of EU countries themselves, allegedly expressing growing frustration and opposition to their governments' policies on Ukraine and Russia.
Data collected by specialists showed that between November 16 and 18 Polish-language online spaces carried a wave of posts about damage to railway tracks on the Warsaw-Lublin line, soon described as an "act of sabotage."
These messages were amplified by accounts on the X platform and by Telegram channels, particularly those with clearly pro-Russian and anti-Ukrainian profiles.
Officials reported a noticeable spread of narratives accusing Ukrainian security services of sabotage.
After Polish authorities confirmed that an "act of sabotage" had taken place, these narratives intensified on both X and Telegram.
Numerous posts appeared that downplayed Russia's role and shifted accusations toward Ukraine, often using highly emotional language.
In the last 24 hours, according to the ministry, more aggressive and openly pro-Russian messages have appeared that link the sabotage exclusively to Ukraine.
The statement listed examples of disinformation slogans circulating online, including claims such as "Ukrainian agents are working fast. They want to block the transit that Poland lives off," "Ukrainian services have thousands of agents in Poland," and accusations that "blowing up the tracks is the work of Ukrainian terrorists."
Some posts used even more extreme language, including the slogan "Poland and Russia together against Ukraine," which the ministry described as a classic element of Russian propaganda operations designed to fracture support for Kyiv.
False claims also spread that "German media warned Polish rail operator PKP about possible sabotage several days earlier."
According to the ministry, this narrative appears aimed at undermining trust in Polish services, suggesting that information was concealed, and at further strengthening suspicions directed at Ukraine.
Officials said the escalation of messaging followed a pattern typical of disinformation campaigns of pushing an alternative narrative, and direct accusations against Ukraine.
Since the official confirmation of sabotage, the rhetoric has hardened significantly, with phrases such as "Ukrainian terrorist attack on Poland" now appearing in some posts.
Experts at the ministry say the behavior of pro-Russian accounts suggests an attempt to coordinate activity across both X and Telegram, or at least a rapid effort to join the discussion and inflame emotions against Ukraine.
Image: Polskie Radio
The warnings come after two acts of sabotage on the busy Warsaw-Lublin rail route.
In the first incident, an explosive device destroyed tracks, in what investigators believe may have been an attempt to derail a train.
In a separate incident, a passenger train carrying 475 people was forced into an emergency stop because of damage to the rails.
Prosecutors have opened an investigation into acts of sabotage of a terrorist nature in connection with the damaged infrastructure.
On Tuesday, speaking in the Sejm, the lower house of the Polish parliament, Prime Minister Donald Tusk said that individuals suspected of involvement in the railway sabotage were Ukrainian citizens working with Russian services.
He added that he had asked the foreign ministry to launch immediate diplomatic steps to secure the extradition to Poland of those suspected of the terrorist attack.
The Washington-based Institute for the Study of War (ISW) said on Tuesday that the sabotage attacks on Poland's rail network were part of Russia's intensifying campaign to destabilize Europe.
(rt/gs)
Source: PAP, gov.pl