Russian arson attack on properties linked to UK prime minister

The arson attacks on properties linked to Prime Minister Keir Starmer in May 2025 have come to exemplify the increasingly overt nature of Russian hybrid operations on British soil. Roman Lavrynovych, a 22-year-old Ukrainian citizen, was convicted of carrying out the attacks after investigators established that he had been recruited and paid entirely through the messaging app Telegram by a Russian handler he had never met in person.

The case is striking in its illustration of how Russian intelligence has adapted its methods. Rather than deploying trained operatives, Lavrynovych was drawn into the operation remotely, with his handler remaining safely in Russia throughout. The Financial Times subsequently reported that the organiser has been linked to a pro-Kremlin group designated by the United States as a state-sanctioned project, suggesting the attacks were not the work of a rogue actor but part of a structured and officially tolerated network.

Despite Lavrynovych's conviction, the architect of the operation faces no meaningful accountability. The handler remains in Russia, beyond the reach of British law, underscoring one of the central frustrations of countering hybrid warfare: perpetrators can direct attacks on Western soil with near impunity, while those recruited to carry them out bear the full legal consequences. For British authorities, the case has reinforced concerns about the vulnerability of individuals to online recruitment by hostile state actors, and about the difficulty of disrupting operations that leave so little physical trace until the damage is done.