Latvian authorities arrested a citizen suspected of espionage for Russia’s GRU, involving the transmission of sensitive defense and NATO-related information.
The investigation, led by the Latvian State Security Service and Military Intelligence, uncovered intelligence gathering on aviation infrastructure and prepaid SIM card acquisition.
The arrest highlights increased Baltic region tensions amid rising Russian provocations and concerns over NATO’s readiness to respond to security threats.
Latvia, a small but strategically significant Baltic nation, found itself thrust into the international spotlight this November after authorities arrested a citizen suspected of espionage for Russia’s GRU military intelligence service. The arrest, announced on November 3, 2025, underscores the growing tensions and heightened alert levels in the Baltic region, as concerns mount over Moscow’s intentions and NATO’s readiness to respond.
The Latvian State Security Service (VDD), working in close cooperation with the country’s Military Intelligence and Security Service (MIDD), led the investigation and subsequent arrest. According to Delfi, the criminal case against the suspect was formally initiated on October 14, 2025, under Part 1 of Article 85 of Latvia’s Criminal Law—a statute that covers the collection and transfer of classified or other sensitive information to a foreign intelligence service. The suspect, whose identity and gender have not been disclosed by authorities, was apprehended in October as officials conducted coordinated raids at two sites connected to the investigation in the coastal city of Ventspils.
The details of the case, as pieced together from Latvian and international media reports, paint a picture of a methodical intelligence-gathering operation. The suspect is accused of collecting and transmitting to Russia’s GRU military intelligence information about several critical aspects of Latvia’s defense sector. This included details about private aviation infrastructure—facilities and assets that could be used for both civilian and military purposes—along with information about the presence and activities of NATO allied forces stationed in the country. The suspect also allegedly gathered intelligence on broader defense-related issues, providing a window into Latvia’s military capabilities and vulnerabilities.
But the scope of the operation didn’t stop there. Acting on direct instructions from Russian intelligence, the suspect reportedly investigated the conditions for acquiring prepaid mobile SIM cards in Latvia. Such information, seemingly mundane on the surface, can be crucial for clandestine communications and operational security, making it a valued asset for foreign intelligence agencies. The authorities have confirmed that various data storage devices were seized during the raids, and an in-depth examination of their contents is currently underway.
Latvian officials have emphasized that the investigation remains ongoing, with the suspect remanded in custody as further evidence is analyzed. “The investigation has established that a Latvian citizen was receiving and transmitting information to the Russian military intelligence about private infrastructure on Latvian territory that can be used for aviation purposes, the presence of NATO allied forces in the country, and various current defense-related issues,” the State Security Service stated, as cited by Delfi. The VDD and MIDD have pledged to release additional information as the criminal proceedings develop.
The arrest comes at a time of heightened vigilance across the Baltics and much of Europe. In September 2025, fighter jet and drone intrusions into NATO airspace reached an unprecedented scale, prompting some European officials to suggest that Moscow was actively testing the alliance’s response mechanisms. According to the Associated Press, these incidents have fueled questions about how prepared NATO truly is to counter Russian provocations—or worse, a direct act of aggression.
Latvia, as a member of both the European Union and NATO, occupies a particularly sensitive position on the alliance’s eastern flank. Its proximity to Russia and its sizable Russian-speaking minority have long made it a focal point for both overt and covert influence campaigns. In recent years, Latvian authorities have taken a hard line against potential security risks. Earlier in 2025, they instructed 841 Russian citizens to leave the country after failing to demonstrate sufficient Latvian language skills or pass required security screenings, as reported by Delfi. The move was seen as part of a broader effort to tighten internal security amid growing fears of foreign subversion.
The current espionage case is not occurring in isolation. According to European Pravda, Latvia is also investigating the possible preparation of major sabotage operations by four individuals believed to be acting in Russia’s interests. Meanwhile, neighboring countries have faced their own challenges: in Germany, three men were recently sentenced for spying for Russia, and in Poland, authorities arrested a Russian military intelligence agent accused of plotting drone and explosive attacks in Poland, Lithuania, and Germany.
The growing list of such incidents has put the Baltic states on edge. The arrest in Latvia has led to increased alert levels throughout the region, with security services on the lookout for further attempts at infiltration or sabotage. While the suspect in the current case remains in custody and the investigation continues, the broader context is one of escalating tension and uncertainty.
For Latvia and its NATO allies, the episode is a stark reminder of the persistent threat posed by Russian intelligence operations. The focus on aviation infrastructure and NATO troop deployments suggests a deliberate attempt to probe the alliance’s capabilities and readiness. According to the Latvian State Security Service, the suspect’s activities were not limited to passive observation; they involved the active collection and transmission of sensitive data at the behest of a foreign power.
“The person is being investigated for collecting information about the Latvian defense sector for the Russian military intelligence service GRU, the security police in Riga announced,” reported Keystone-SDA. This included information on private aviation infrastructure and the presence of NATO troops in Latvia. Authorities have so far declined to provide further details on the suspect’s background, citing the ongoing nature of the investigation and the need to protect operational security.
The case has also drawn attention to the methods used by Russian intelligence to operate within EU and NATO member states. The use of local citizens, rather than foreign operatives, complicates counterintelligence efforts and raises difficult questions about internal vulnerabilities. The investigation into how prepaid SIM cards are acquired, for example, hints at the sophisticated tradecraft employed by Russian agencies to maintain secure lines of communication and avoid detection.
As the investigation unfolds, Latvian authorities have promised transparency and continued cooperation with their NATO partners. The State Security Service, along with MIDD, is expected to provide further updates as new facts emerge from the analysis of seized data and ongoing interrogations. For now, the arrest stands as a clear signal that Latvia remains vigilant in the face of external threats—and that the contest between Russian intelligence and Western security services is far from over.
With tensions simmering and the stakes higher than ever, the Baltic states and their allies are left to ponder just how deep the roots of foreign espionage may run—and what steps must be taken to safeguard their sovereignty in an increasingly uncertain world.