INVESTIGATION: The SVR Accuses Latvia — Is Moscow Manufacturing a War Pretext?

INVESTIGATION: The SVR Accuses Latvia — Is Moscow Manufacturing a War Pretext?

Introduction: The accusation that chills the blood

A declaration that crosses every line

On May 18–19, 2026, Russia's Foreign Intelligence Service — the SVR — publicly declared that Ukrainian drone operators had been deployed in Latvian military bases. The statement named five specific installations: Ādaži, Selonia, Lielvārde, Daugavpils, and Jēkabpils. It did not stop at accusation. The SVR added, word for word, that the coordinates of decision centers on Latvian territory are well known — a barely veiled military threat aimed at a sovereign NATO member state.

The Institute for the Study of War (ISW) assessed the declaration the very next day: a fabrication, consistent with a broader pattern of information warfare targeting the Baltic states. What Moscow had staged was not an intelligence disclosure. It was the infrastructure of a pretext — assembled piece by piece over weeks of carefully orchestrated drone incidents, political crises, and escalating rhetoric.

The anatomy of a manufactured crisis

Understanding what the SVR actually did in May 2026 requires stepping back from the individual incident and reading the full sequence. Three drone alerts in Latvia within three weeks. A Romanian F-16 shooting down a Ukrainian drone over Estonia — the first NATO shoot-down since the Cold War. A Latvian coalition government collapsing under the pressure. Airport closures. Schools placed on lockdown. And through it all, Moscow amplifying each incident, framing each wayward drone as evidence of a sinister Western-Ukrainian conspiracy against Russia.

The pattern is not new. The toolkit is not improvised. What is new in 2026 is the operational precision of the fabrication — the speed with which SVR declarations follow real incidents, the way Russian electronic warfare is used to redirect Ukrainian drones toward NATO airspace, and the degree to which Kremlin-controlled media then packages the chaos as deliberate aggression. This is hybrid warfare at its most refined.

The timeline of incidents: from drone to political crisis

March 23: the first shot across the Baltic

The sequence began on March 23, 2026, when a Ukrainian drone crashed near Varėna, Lithuania. Ukrainian officials and Western analysts quickly identified the cause: Russian electronic warfare had diverted the UAV from its intended path — a strike on the Primorsk oil terminal — rerouting it into Lithuanian airspace, where it came down on NATO soil. It was the first confirmed instance of what would become a recurring pattern: Russia using its jamming and spoofing capabilities not merely to neutralize Ukrainian drones, but to engineer their trajectories into allied territory.

The incident generated attention but not alarm — not yet. Lithuania is accustomed to Russian provocations. The drone was assessed as a navigation failure induced by hostile EW, and the matter was handled quietly through diplomatic channels. What no one fully registered at the time was that this was not an isolated event but the opening move of a deliberate escalation cycle.

May 7–21: the Baltic states under siege

The tempo shifted sharply in early May. On May 7, two drones entered Latvian airspace. One crashed near the Rēzekne oil depot — close enough to critical infrastructure to trigger a full security review. The incident set off a political earthquake in Riga: Latvian Prime Minister Silina publicly demanded the resignation of Defence Minister Sprūds, and the coalition government entered a crisis from which it did not recover. The coalition collapsed.

On May 19, a Romanian F-16 operating under the Baltic Air Policing mission shot down a Ukrainian drone over Lake Võrtsjärv in Estonia. The significance of that action cannot be overstated: it was the first time a NATO aircraft had downed a drone since the Cold War. On May 20, Vilnius went on alert — the airport was closed, students were sheltered in place. On May 21, Latvia recorded its third drone alert, with incidents reported in Ludza, Krāslava, and Rēzekne. The Baltic states were living through a sustained, coordinated pressure campaign.

The SVR declaration of May 18–19: anatomy of a fabrication

Five bases, zero evidence

The SVR's May 18–19 declaration was constructed with deliberate specificity. By naming five Latvian military bases — Ādaži, Selonia, Lielvārde, Daugavpils, and Jēkabpils — Moscow created the appearance of credible intelligence. The specificity was the weapon. Vague accusations can be dismissed. Named facilities, precise coordinates, operational details: these create doubt, force denials, and consume diplomatic bandwidth. Latvia spent days responding to claims that had no factual basis whatsoever.

The ISW's assessment on May 19 was unambiguous: the SVR declaration was a fabrication, consistent with Moscow's established method of using false intelligence claims to prepare the information environment ahead of escalatory action. The SVR was not revealing intelligence. It was manufacturing narrative infrastructure — the kind that, in Georgia in 2008, preceded actual military intervention.

The threat embedded in the accusation

Beyond the false claims about Ukrainian operators, the SVR embedded a direct threat in its statement: NATO membership "will not protect Latvia from just retribution against terrorist accomplices." The phrase "just retribution" is not diplomatic language. It is the vocabulary of military action. Combined with the declaration that coordinates of Latvian decision centers are well known, the SVR statement was a public announcement of targeting data — sent not through back channels but broadcast to the world.

Latvian Foreign Minister Braže responded with appropriate clarity: "Russia is lying again." Ukrainian Foreign Ministry spokesman Tykhyi was equally direct: "There is no truth in Moscow's latest lies." But firmness in response does not erase the threat. The SVR knew its audience was not only Riga — it was every NATO capital calculating how seriously to take Moscow's warnings.

May 19: a Romanian F-16 shoots down a Ukrainian drone over Estonia

A historic shoot-down and its implications

The downing of a Ukrainian drone by a Romanian F-16 over Lake Võrtsjärv on May 19, 2026 is not merely a tactical footnote. It is a strategic inflection point. For the first time since the Cold War, a NATO aircraft engaged and destroyed an aerial target over allied territory. The drone was Ukrainian — not Russian — but its presence in Estonian airspace was not the result of Ukrainian intent. Estonian Foreign Minister Tsahkna stated clearly on May 22: "Russia is directing these drones toward NATO territory."

The implication is profound and deeply uncomfortable. Russia has developed the ability to use Ukrainian drones as involuntary instruments of provocation against the very alliance supporting Ukraine. Every misdirected Ukrainian UAV that lands on NATO soil becomes a data point in Moscow's fabricated narrative. Every NATO shoot-down becomes a visual that Russian state media can reframe as "NATO attacking Ukrainian drones" — a perfect propaganda loop, self-reinforcing and difficult to interrupt.

NATO's immediate response

Following the shoot-down, NATO reinforced the Baltic Air Policing mission. Estonia, on May 30, activated fixed drone detection sensors at the Luhamaa border crossing, the first permanent ground-based UAV surveillance infrastructure deployed as a direct response to the EW diversion campaign. These are the kinds of quiet, procedural adjustments that happen under the radar of public attention but represent a fundamental shift in how the alliance assesses the threat environment along its eastern flank.

Supreme Allied Commander Europe (SACEUR) General Grynkewich offered the clearest articulation of what Moscow's behavior actually reveals: "They know we are not a threat to Russia. If they thought we were a threat, they wouldn't have emptied the Leningrad military district to invade Ukraine." The statement cuts through the fog of Russian justification. The threat narrative is a tool. The targeting of Latvia is a choice, not a reaction.

Electronic warfare as a weapon of manipulation

Redirecting drones as a strategic instrument

Russia's electronic warfare capabilities along the Baltic littoral have been documented for years. What has changed in 2026 is the application of those capabilities as an offensive informational weapon rather than a purely defensive or tactical tool. The diversion of Ukrainian drones into NATO airspace — confirmed in the Varėna incident, strongly suspected in the subsequent Latvian incidents — represents a new doctrine: use the enemy's weapons against the enemy's allies.

The mechanics are well understood by technical analysts. GPS spoofing and jamming can alter a drone's navigational reference frame, causing it to fly toward an unintended destination while its onboard systems report normal operation. The drone believes it is on course. Its actual trajectory is controlled by the party manipulating the electromagnetic environment. For Russia, this creates a weapon with perfect deniability: the drone is Ukrainian, the crash is "proof" of Ukrainian recklessness, and the SVR can then construct whatever narrative superstructure serves the moment.

Ukraine's offer and the alliance's vulnerability

Ukraine's response was not defensive paralysis. Kyiv offered to send expert teams to Baltic states to help them secure their airspace against Russian electronic warfare. The offer reflects hard-won operational knowledge — Ukrainian forces have spent three years learning to detect, counter, and route around Russian EW capabilities. Lithuania became the first NATO country to sign a drone production and technology agreement with Ukraine, a direct institutional response to the EW threat.

Ukrainian Deputy Prime Minister Svyrydenko discussed expanded cooperation with Estonian Prime Minister Michal and Lithuanian Prime Minister Paluckas during a Baltic tour in June 2026. The conversations were not abstract. They addressed specific technical vulnerabilities, specific border crossings, specific categories of equipment that could reduce the window for Russian EW exploitation. The Baltic states are not passive victims in this scenario — they are adapting, and they are doing so with Ukrainian partnership.

The June escalation: Putin threatens directly

From SVR declaration to presidential threat

The SVR accusation of May 18–19 was the opening gambit. The closing statement came from Vladimir Putin himself on June 23, 2026: Russia would conduct retaliatory strikes on European countries if drones targeting Russian installations were launched from their territory. Defense Minister Shoigu joined the chorus. The Russian Foreign Ministry issued a "special warning" to the Baltic states — a category of diplomatic communication reserved for situations Moscow wants to treat as final notice before action.

The escalation ladder from May 18 to June 23 is not spontaneous combustion. It is a constructed narrative arc: fabricate intelligence, create political crisis in target country, allow tension to build across multiple incidents, then elevate to the level of presidential threat. Each step is deniable in isolation. The full sequence is unmistakable. Poland's Foreign Minister publicly warned that Putin's retaliatory rhetoric sounded like "an announcement of a provocation."

The geography of the threat

Putin's June 23 statement was not addressed exclusively to Latvia. It was addressed to every European country hosting NATO infrastructure, training missions, or intelligence-sharing arrangements with Ukraine. That includes Poland, Romania, the Czech Republic, Germany, France, and the United Kingdom. The threat was designed to be maximally destabilizing — to force each European government to calculate its own exposure and begin hedging against alliance commitments.

The calculation Moscow is making is not that it will actually strike Paris or Warsaw. The calculation is that the credibility of the threat alone will produce political friction within NATO — second-guessing, demands for de-escalation, calls for "restraint" in supporting Ukraine. Fear is the actual payload. The drone incidents are the delivery mechanism. The SVR declaration is the targeting data.

The ISW pattern: Finnish and Baltic precedents

Georgia 2008: the template

The ISW's May 19 assessment did not merely label the SVR declaration a fabrication. It placed it in a historical framework of Russian information warfare preceding military escalation. The clearest precedent is Georgia, August 2008. In the weeks before the Russian military crossed into South Ossetia and Abkhazia, Moscow constructed an elaborate narrative of Georgian aggression against Russian peacekeepers and civilians. The fabrications were exposed quickly — but not quickly enough to prevent the war.

The ISW framework identifies a consistent pattern: fabricate incident → attribute to target state → generate international attention → create political pressure on target → escalate rhetoric → position forces → act. Not every sequence ends in military action. Some are designed purely for political effect. But the infrastructure built during the sequence is real, and it remains available for use if Moscow decides conditions are favorable.

The Finnish and Baltic pattern in 2026

The ISW's specific reference to Finnish and Baltic precedents in its May 19 analysis reflects a pattern of Russian behavior since Finland and Sweden joined NATO. Moscow has consistently probed the political cohesion of Nordic-Baltic security arrangements — through GPS jamming of civilian aircraft, territorial airspace incursions, hybrid incidents at border crossings, and coordinated disinformation campaigns targeting specific political figures in the Baltic capitals.

The SVR's Latvia operation follows the same template applied to Finland before its NATO accession: manufacture a security incident, accuse the target of collaboration with Ukraine, test whether NATO's collective response is slower than the political damage in the targeted country. In Latvia's case, the coalition collapse under Prime Minister Silina suggests the operation achieved at least partial success at the domestic political level, even as it failed to generate international credibility.

Von der Leyen and the EU: a coordinated response

An unambiguous condemnation

European Commission President Ursula von der Leyen did not equivocate. Her response to the SVR's threat against Latvia was immediate and categorical: the statement was "absolutely unacceptable." The language was deliberate — not "concerning," not "regrettable," but a direct rejection of Moscow's right to issue military threats against EU and NATO member states. For von der Leyen, the incident fit a pattern she has been tracking since February 2022: Russia testing the boundaries of what European institutions will absorb without institutional consequence.

The EU response went beyond individual condemnation. Fifteen Baltic MEPs sent a formal letter to von der Leyen demanding a coordinated European response to the drone incidents and the SVR declaration. The letter represented the first collective parliamentary action in response to the May crisis — a signal that the political pressure for institutional escalation was building not just in national capitals but in Brussels.

The EU's structural constraint

The EU's fundamental challenge in responding to hybrid threats is that its security architecture was not designed for this environment. Article 5 of the NATO Treaty addresses collective defense against armed attack. Hybrid warfare — drone diversions, false intelligence declarations, coordinated political destabilization — operates in the space below that threshold. The EU has tools — sanctions, diplomatic démarches, information sharing — but they are reactive and slow relative to the speed at which Russian hybrid operations produce political effects.

The structural answer being developed in Brussels is a hybrid threat response framework that integrates intelligence sharing across EU and NATO channels, pre-authorizes certain defensive measures in member states, and establishes clearer red lines for what constitutes a triggering event. The Latvia incident accelerated that institutional work. It also exposed how far the framework remains from operational readiness.

The legal dimension: threatening a NATO member state

International law and the limits of tolerance

The SVR's declaration that Latvia would not be protected by NATO membership from "just retribution" raises a specific and serious question of international law. Under the United Nations Charter, threats of force against sovereign states are prohibited. Under the NATO Treaty, an armed attack against one member is treated as an attack against all. The SVR's statement, combining false accusations with an explicit threat of military consequences, sits at the intersection of both prohibitions.

No legal mechanism currently exists to force Russia to account for that statement in a court with jurisdiction and enforcement power. Russia vetoes Security Council action. The International Court of Justice can issue rulings that Moscow ignores. The legal framework exists on paper; the enforcement architecture does not. What the legal analysis does provide is clarity about the normative breach — and a basis for documenting Moscow's accountability in the historical record.

Documenting the threat for future accountability

Baltic legal scholars and international law experts have been documenting the May 2026 incidents with precisely this future-accountability framework in mind. The SVR declaration, the drone incidents, the June 23 Putin threat — each is being preserved as evidence in the evidentiary record that international legal institutions will eventually need to examine. War crimes tribunals, reparations mechanisms, sanctions frameworks — all of them require documented evidence of intent, pattern, and command responsibility.

Latvia's decision to maintain and publish full official records of the drone incidents, the SVR declaration, and its diplomatic responses is not bureaucratic routine. It is strategic documentation. Every verified fact preserved now is a weapon available to those who will eventually prosecute Russia's accountability — whether that process takes five years or twenty-five.

Allied intelligence responses

Shared assessment and public attribution

The response of allied intelligence services to the SVR declaration was notable for its speed and its openness. Within hours of the SVR's May 18–19 statement, multiple allied capitals had shared assessments through NATO intelligence-sharing channels. By May 20, the ISW's public analysis had provided the framework that allied governments could reference without declassifying sensitive collection methods. The attribution of the drone diversions to Russian EW was not merely suspected — it was the consensus assessment of the alliance's intelligence community.

What distinguished the response from previous episodes of Russian disinformation was the decision by several allied governments to be unusually transparent about their assessments. Estonia's activation of fixed drone detection sensors at Luhamaa on May 30 was announced publicly — a deliberate signal to Moscow that the alliance was adapting its detection infrastructure, that the EW manipulation was understood, and that future incidents would be tracked with greater precision.

The challenge of public attribution

Public attribution of hybrid attacks carries inherent risk. It forces the attributing government to reveal something about the intelligence methods used to reach its conclusions. Moscow exploits that tension deliberately — constructing operations at exactly the level of ambiguity where public attribution is possible but not without cost. The Baltic states have largely chosen transparency over operational security in these cases, calculating that the political benefits of clear public attribution — maintaining domestic trust, sustaining allied cohesion — outweigh the risk of revealing collection methods that Moscow has likely already mapped.

The Estonian Foreign Minister's public statement on May 22 — "Russia is directing these drones toward NATO territory" — was not a casual remark. It was a calibrated decision to establish the public record on the side of factual attribution, before Russian state media could fully consolidate its counter-narrative.

Russian media and the spread of the narrative

The amplification machine

Every element of the SVR's Latvia operation was designed with Russian state media amplification in mind. The naming of five specific military bases gave RT, Rossiya-1, and affiliated channels concrete, visual material to work with — maps, graphics, facility profiles. The invocation of "terrorist accomplices" gave commentators a moral frame that resonated with domestic audiences primed by years of anti-Ukrainian messaging. The promise of "just retribution" gave the military-patriotic media wing a forward-looking narrative of strength and resolve.

Within 24 hours of the SVR declaration, the fabricated story was circulating in at least six languages across Russian state and state-adjacent media platforms. The fact that it was demonstrably false — as established by ISW, by Latvian officials, by Ukrainian officials, by multiple allied governments — slowed but did not stop the spread. In the information environment that Russia has spent a decade building, denial and refutation are processed as confirmation bias fodder by the audiences already inside the narrative bubble.

The Western information deficit

The alliance's response to Russian media amplification remains structurally inadequate. Democratic governments cannot order media to carry counter-narratives. They cannot match the operational tempo of a state-controlled media machine that can shift messaging within hours. What they can do — and are doing with increasing sophistication — is pre-bunk rather than debunk: publish assessments before Russian narratives have time to consolidate, establish the factual record first, and force Russian media into the reactive position.

The ISW's May 19 assessment, published the same day as the SVR declaration, was an example of effective pre-bunking. It established the fabrication label before the narrative had time to harden. Latvia's immediate official response did the same. The challenge is sustaining that operational tempo across dozens of incidents simultaneously — and doing so in enough languages to reach the audiences that Russian media is targeting.

What the SVR operation reveals about Russia's 2026 strategy

A strategy of threshold management

The May 2026 Latvia operation is not an improvisation. It reflects a deliberate Russian strategy of threshold management: probe NATO's response capacity at levels below the Article 5 threshold, generate political costs within targeted alliance members, create precedents for escalatory rhetoric, and position for future operations with maximized deniability. The SVR's involvement — rather than purely military or GRU-led operations — signals that this is an intelligence-led political warfare campaign, not a military operation with an information component.

The targets are chosen for maximum political fracture potential. Latvia is a small state with a significant Russian-speaking minority, a coalition government, and complex domestic politics around NATO membership. It is precisely the kind of target where a well-executed hybrid operation can achieve outsized political effects relative to the resources invested. The coalition collapse under Silina's government was not an accident. It was the intended outcome.

The 2026 strategic context

Russia's Baltic campaign in 2026 is running in parallel with its military operations in Ukraine, its economic relationship with China, and its diplomatic engagement with Iran and North Korea. The Ankara Summit of July 7–8, 2026 — at which NATO Secretary General Mark Rutte announced "tens of billions" in defence contracts — is precisely the kind of alliance consolidation event that Moscow's hybrid operations are designed to disrupt and delay. Every political crisis in a Baltic capital is a distraction from allied defence spending. Every drone incident is a budget conversation that NATO defence ministers have to have instead of procurement decisions.

The strategic logic is clear: make NATO's eastern flank expensive to defend, politically unstable to govern, and too domestically divided to sustain long-term alliance commitments. The SVR's Latvia operation is not about Latvia. It is about the coherence of the entire eastern flank — and beyond it, the political will of the full alliance.

The stakes for the future: how far will Putin go?

The precedent problem

The central question raised by the May–June 2026 escalation cycle is one of precedent. If Russia can publicly name NATO member states as targets of "just retribution," fabricate intelligence claims about their complicity in Ukrainian operations, use electronic warfare to redirect Ukrainian drones into their airspace, and suffer no material consequence beyond diplomatic condemnation — what constrains the next operation? What prevents the same template from being applied to a second Baltic state, a Polish logistics hub, or a German training facility?

The deterrence framework assumes that threats of sufficient cost will prevent escalation. But hybrid operations below the Article 5 threshold exist precisely to exploit the gap between the alliance's commitment to collective defense and its reluctance to treat political warfare as a triggering condition. Russia is not testing whether NATO will fight. It is testing whether NATO will act decisively against provocations that fall just short of the threshold that would require it to fight.

The alliance's credibility test

SACEUR Grynkewich's statement — that Russia knows NATO is not a threat because Russia emptied its Leningrad district to attack Ukraine — is the clearest articulation of where the credibility argument stands. NATO's deterrence posture is not in question on the conventional military level. What is in question is the alliance's ability to respond coherently and consequentially to the hybrid space — the space where Russia is actually operating in 2026.

The Ankara Summit's defence spending commitments, the Baltic Air Policing reinforcement, Estonia's drone detection infrastructure, Lithuania's drone production agreement with Ukraine — these are all steps toward closing the gap. But the gap remains open, and Russia is operating inside it every day. The question is not whether Putin will go further. History suggests he will go as far as the absence of consequences allows.

NATO facing the hybrid challenge: the institutional response taking shape

From reactive to anticipatory

The institutional evolution within NATO in response to the 2026 Baltic hybrid campaign is moving — slowly but tangibly — from reactive to anticipatory posture. The reinforcement of Baltic Air Policing following the Romanian F-16 shoot-down was reactive. The activation of Estonia's fixed drone detection sensors at Luhamaa was the first anticipatory infrastructure deployment in direct response to the EW diversion pattern. The difference matters: one responds to an incident after it occurs, the other attempts to detect and attribute the precursors before the incident completes.

Lithuania's drone production agreement with Ukraine is a structural hedge against future dependency — a recognition that in the hybrid threat environment, indigenous drone production and countermeasure capacity is a form of territorial defense that conventional military posture cannot substitute for. The Baltic states have arrived at this understanding not through theoretical analysis but through direct exposure to Russian hybrid operations over the past eighteen months.

The institutional architecture still under construction

The Ankara Summit of July 7–8, 2026 had hybrid threat response on its agenda — alongside the headline-grabbing "tens of billions" in defence contracts that Rutte announced. The institutional outcome was a commitment to deepen intelligence sharing around drone incidents, to establish clearer protocols for cross-border EW incidents, and to create a rapid attribution mechanism that can publicly establish the chain of responsibility for hybrid attacks within hours rather than days.

None of this is sufficient on its own. The architecture is still under construction, and Russia is operating at tempo while the alliance builds. But the trajectory is toward a posture that takes hybrid warfare as seriously as conventional deterrence — and that is a meaningful shift from where NATO stood before February 2022. The Baltic states have paid a high price to push the alliance in that direction. They are not done paying it.

Conclusion: Latvia is not betraying anyone — Russia is manufacturing

The verdict of the facts

The SVR's accusation against Latvia is false. That conclusion is not contested by any credible source — not by NATO intelligence services, not by the ISW, not by Ukrainian officials, not by the Latvian government itself, not by the EU. The five military bases named by Moscow do not house Ukrainian drone operators. The drone incidents over Latvian airspace were the product of Russian electronic warfare diverting Ukrainian UAVs from their intended targets. Latvia did not betray anyone. Russia fabricated the evidence of betrayal.

The political damage inflicted on Latvia — a collapsed coalition, three drone alerts in three weeks, a national security debate consuming the government's operational capacity — is real, even if the accusation is false. This is the mechanism that hybrid warfare exploits: truth is slow, and political damage is fast. By the time the fabrication is fully refuted, the political cost has already been extracted.

What comes next

The May–June 2026 sequence will not be the last of its kind. Russia has demonstrated that the template works — at least at the level of domestic political disruption in targeted states. The alliance's task is to make the template progressively more expensive to execute, by improving attribution speed, pre-bunking capabilities, and the political resilience of front-line members. Latvia's resilience — the speed and clarity with which Latvian officials publicly refuted Moscow's claims — is part of the answer. So is the support it received from Brussels and allied capitals.

The deeper answer requires sustained institutional investment in the hybrid defense space: intelligence sharing, drone detection infrastructure, EW countermeasures, drone production capacity, and the political will to impose real costs on Russian hybrid operations. Putin will test the limits of what is tolerable for as long as the limits remain undefined. Defining them, enforcing them, and doing so with the full weight of an alliance that has internalized the lesson of 2022 — that is the work of the years ahead.

By Maxime Marquette, columnist

Columnist's transparency note

This investigation is based exclusively on open-source reporting from verified journalistic sources and publicly available assessments from the Institute for the Study of War (ISW). No confidential sources were consulted. No diplomatic contacts were solicited. All facts, dates, quotations, and figures cited in this article are drawn directly from the sources listed below and are verifiable. The analytical conclusions represent the author's independent editorial judgment, not official positions of any government or institution. The author has no financial or institutional interest in any of the parties described.

The facts documented here are not in dispute among credible Western analysts and officials. The SVR declaration of May 18–19, 2026 has been assessed as a fabrication by multiple independent institutions. The drone incidents are documented in official Latvian, Estonian, and Lithuanian government records. The Putin June 23 statement is part of the public record.

Sources

Primary sources

Euromaidan Press (ISW assessment): Russia prepares the ground for Baltic aggression as SVR threatens Latvian decision-making centers — May 20, 2026

Euromaidan Press: Latvia drone alert across three municipalities — May 21, 2026

Euromaidan Press: Russia threatens Latvia with "just retribution," von der Leyen calls it "absolutely unacceptable" — May 20, 2026

Kyiv Independent: Russia threatens Latvia over unfounded Ukrainian drone allegations — May 19, 2026

Secondary sources

Euromaidan Press: Estonian Foreign Minister — Russia is directing Ukrainian drones into NATO territory — May 22, 2026

Euromaidan Press: Polish FM warns Putin's retaliatory rhetoric sounds like an announcement of a provocation — June 24, 2026

Ukrinform: Ukraine denies Russian claims of planned attacks from Latvia, calls them disinformation — May 19, 2026

Euromaidan Press: Svyrydenko and Michal expand drone cooperation after weeks of stray UAVs over the Baltic — June 3, 2026