The Delfi news portal reported on November 3, 2025, that Latvia’s State Security Service (VDD), working with military intelligence (MIDD), detained a Latvian citizen suspected of gathering intelligence for Russia’s GRU. The man has been placed under arrest as part of a criminal case launched in mid-October for collecting information in the interests of a foreign intelligence service.
Espionage targets and ongoing investigation
Searches were carried out in Ventspils shortly after the case was opened. Investigators are analyzing data from seized electronic devices. The suspect allegedly collected and transferred to the GRU information about private infrastructure in Latvia that could serve aviation purposes, the presence of NATO allied forces in the country, and current defense-sector developments. He also gathered details about purchasing prepaid mobile SIM cards in Latvia and other data relevant to covert operations.
Broader network of suspected saboteurs
In late October, the VDD brought charges against four individuals suspected of preparing serious acts of sabotage on behalf of Russia. Three were detained in the spring, and one earlier; at least two are Latvian citizens. Investigators believe the group planned and executed malicious acts against various facilities in Latvia, including an arson attack on a defense-related company in autumn 2023. They also allegedly plotted to set fire to a Ukrainian truck at a critical infrastructure site in early 2024 and conducted reconnaissance of several other targets, sending images and videos to Russian handlers.
Russian hybrid operations in the Baltics
Security experts view this case as part of Russia’s wider intelligence and disinformation campaign against the West, accompanying its war in Ukraine. The Kremlin sees the Baltic region as a key front in its hybrid warfare strategy — blending espionage, propaganda, cyberattacks, and attempts to destabilize internal politics. Moscow’s increased interest in Latvian defense infrastructure and NATO presence signals preparation not only for intelligence collection but also for possible sabotage operations.
Latvia’s response and ongoing risks
The arrests underscore Latvia’s intensified counterintelligence efforts, though officials acknowledge that the threat of Russian espionage and sabotage remains high. Experts warn that Moscow seeks to develop tools for covert communication and coordination of agent networks across Europe. Strengthening human resources, cyber analysis, and international coordination is seen as essential to countering these threats.
Need for stronger defense coordination
Latvia continues to rely on intelligence sharing with NATO allies, joint investigative groups, and funding to enhance both cyber and physical protection of critical infrastructure. Authorities also emphasize public vigilance — promoting awareness of recruitment methods and suspicious activity as vital elements of resilience against Russian hybrid aggression.
