Latvian authorities have uncovered a wide-ranging network of Russian informants operating inside the country, collecting intelligence on Ukrainians, supporters of Ukraine and the movement of military equipment, while also attempting to infiltrate drone manufacturing facilities linked to supplies for Kyiv. Details of the case were reported on January 19, 2026, following the exposure of individuals connected to Russian intelligence services who had been systematically gathering sensitive information inside Latvia, as outlined in a report on the exposure of a Russian-linked informant network in Latvia.
Investigators say the identified group represents only a fragment of broader agent and informant structures used by Russian special services across the Baltic states. These networks are designed to collect data on military logistics, arms production and pro-Ukrainian communities, forming part of Moscow’s preparation for hybrid influence and sabotage operations in the region.
Surveillance, infiltration and hybrid preparation
According to Latvian security officials, the informants monitored Ukrainian nationals and activists supporting Ukraine, tracked movements of military hardware and sought access to facilities involved in the production of drones and other military equipment destined for Ukraine. Such activities are viewed as reconnaissance efforts intended to map vulnerabilities and identify potential targets for future disruptive actions.
Experts warn that even fragmented, seemingly low-level observations can be operationally valuable when aggregated. Information gathered on logistics, production sites and individuals may be used to plan sabotage, intimidation or targeted pressure campaigns, increasing the risk of destabilisation inside NATO member states.
Baltics as a priority target for Russian intelligence
Latvia and its Baltic neighbours are considered priority targets for Russian hybrid operations due to their geographic proximity to Russia, their role on NATO’s eastern flank and the presence of Russian-speaking communities. Investigators say Russian intelligence traditionally relies on locally based networks — sometimes described as a “fifth column” — made up of residents with ideological sympathy, personal grievances or social vulnerabilities that make them receptive to recruitment.
In this case, Latvian officials say the network exploited pro-Kremlin activist environments to gather data not only for espionage purposes, but also to compile personal information on Ukrainians and their supporters. Security sources warn such data collection mirrors known Russian practices of creating “target lists”, underscoring the potential for intimidation or worse.
Part of a broader European pattern
Latvian authorities stress that the uncovered informant ring is not an isolated incident. Instead, it reflects a wider Russian strategy aimed at undermining security in Western countries by penetrating critical sectors, mapping defence-related infrastructure and exerting pressure on communities opposed to Moscow’s policies.
The exposure of the network has heightened concerns about the scale of Russian intelligence activity already under way inside Europe. Officials say such operations pose direct risks not only to national security, but also to the safety of Ukrainian refugees and other residents who openly oppose Russia’s war against Ukraine.
Call for coordinated counterintelligence response
Western governments are urged to treat the Latvian case as a warning of intensified Russian subversive activity rather than a standalone episode. Security analysts argue that effective deterrence will require tighter coordination of counterintelligence efforts within NATO and the EU, enhanced intelligence-sharing mechanisms and sustained vigilance against infiltration of sensitive industries.
Latvian officials emphasise that unity in sanctions policy, information security and law enforcement cooperation remains essential to limiting the effectiveness of Russian hybrid operations. Without a coordinated response, they warn, informant networks of this kind risk becoming a routine instrument of influence over European politics and public opinion.
