Latvia is facing a sustained increase in cyberattacks and sabotage attempts originating from Russia, according to a recent report from the nation’s security agency. While most of these incidents have not resulted in significant disruption, the volume of threats has reached an all-time high.
Rising Cyber Threat
The Latvian national security service, SAB, released its annual report this week detailing the surge in cyber activity. 2025 saw a significant increase in registered cyber threats compared to levels recorded before Russia’s 2022 invasion of Ukraine. The report identifies Russia as the primary source of cyber risk to Latvia.
Types of Attacks
Most incidents reported by SAB are linked to cybercrime and digital fraud. More serious cases include intrusion attempts, the distribution of malware, equipment compromise, and distributed denial-of-service (DDoS) attacks. Russian-linked hacktivist groups have demonstrated the capability to target industrial control systems in Latvia and other Western countries.
These attacks often aim to cause short-term disruption, intimidate populations, and retaliate against countries supporting Ukraine. DDoS attacks against Latvian government institutions, municipalities, and critical infrastructure frequently coincide with politically sensitive dates or decisions.
Future Outlook
SAB warns that the threat from Russia is expected to remain high, even if the war in Ukraine concludes. Moscow is prepared to continue these hostile activities into 2026 and beyond. The report also cautions that Russia’s view of Latvia is evolving, increasingly mirroring its perception of Ukraine prior to the war.
This warning aligns with broader concerns across Europe, where Russian cyberattacks, sabotage, and provocation are being described as a form of “hybrid warfare,” as stated by Ursula von der Leyen, president of the European Commission.
Frequently Asked Questions
What types of infrastructure are at risk?
According to the report, operational technology systems used to manage energy, water, and transport infrastructure are at growing risk, as these systems often lack sufficient cybersecurity protections.
What was the impact of the cyberattacks in 2025?
While the number of cyber threats reached an all-time high in 2025, most incidents have not caused serious disruption to critical infrastructure or national security.
Is Russia the only source of cyber threats to Latvia?
The report identifies Russia as the primary source of cyber risk to Latvia, driven by Moscow’s strategic objectives and Latvia’s support for Ukraine.
As Latvia and its allies navigate this evolving threat landscape, what steps can be taken to bolster cybersecurity defenses and mitigate the risk of future attacks?
Keep reading