Event 14

{
  "attack_type": "Bomb Threat",
  "category": "Sabotage",
  "confidence": "Low",
  "confidence_rationale": "Details are supported by law enforcement statements at a press conference, and the article cites government sources and specific official quotes regarding the cross-border nature of the attacks and their attribution.",
  "continuous_since": "2023-10-10T00:00:00Z",
  "continuous_summary": "Mass e-mail threats targeting school systems in Latvia have been ongoing and also observed in Poland and the US, attributed to groups with known Russian affiliations.",
  "countries": [
    "Latvia",
    "Poland",
    "United States of America"
  ],
  "country": "Latvia",
  "defense_prep": {},
  "description": "Latvian police announced that schools will be provided protocols ('algorithms') for handling threat e-mails following a wave of threatening messages sent to educational institutions. The phenomenon is considered part of ongoing cyber-enabled disruptive attacks, which have also targeted Poland and the US. Authorities suspect the source is outside Latvia and likely linked to Russia. The intent appears to be spreading disruption and alarm without physical harm.",
  "event_time_utc": "2023-10-13T12:00:00Z",
  "evidence": [
    "The article reports a recent wave of threatening emails sent to schools across Latvia.",
    "Police confirm similar incidents also occurred in Poland and the USA.",
    "Police have created informational protocols outlining how schools should handle future email threats.",
    "Latvian authorities identify the attack vector as originating from local 'unfiltered networks', complicating mitigation.",
    "Police organized a press conference on October 11, 2023, addressing the threat.",
    "Procedural algorithms are being distributed to schools for responding to such threats.",
    "Attacks have also affected educational institutions in Poland and the USA.",
    "Mass threat e-mails sent to schools in Latvia, with prior similar incidents affecting Poland and the US.",
    "Latvian police delivering press conference and providing procedural guidance to schools.",
    "Attribution of attacks to actors associated with Russia and described as 'Latvia's unfriendly countries.'"
  ],
  "evidence_quotes": [
    "The source of threatening letters sent en masse to educational institutions this week was not the first case seen by the police.",
    "These types of attacks are not new, and that particular source has also targeted Poland and the US.",
    "The police are drafting lists of type of attacks and how to react, and educating school staff.",
    "He said it was known now that the source of the threat letters 'comes from Latvia’s unfiltered networks, which may hinder the rapid resolution of this series of alleged repeated attacks.'",
    "Such a massive attack directly on educational institutions was practically unprecedented.",
    "The source of threatening letters sent en masse to educational institutions this week was not the first case seen by the police. These types of attacks are not new, and that particular source has also targeted Poland and institutions in the USA.",
    "He said it was known now that the source of the threat letters 'comes from Latvia's unfriendly countries, which may hinder the rapid resolution of this series of alleged repeated attacks.'",
    "Police and other field trips and attacks are not easy and quick to detect, 'however, rather are too to detect them and they are also fully available to us, both to ourselves and to collaborators at European and other institutions and agencies.'",
    "It is the only international cooperation mechanism between law enforcement agencies that can be used at the moment. Russia used municipal authorities and law enforcement, who also received such threats.",
    "The received emails, the initial text was, were deliberately targeted at children, causing alarm directly, criminal proceedings have been initiated.",
    "The source of threatening letters sent en masse to educational institutions this week was not the first case seen by the police. These types of attacks are not new, and that particular source has also targeted Poland and the US.",
    "This is the only international cooperation mechanism lawyers have put in place in action, the police are already cooperating internationally on the case.",
    "He said it was known now that the source of the threat letters 'comes from Latvia's unfriendly countries, which many had hoped the resolution of this series of alleged repeated attacks.'",
    "Rules noted that this person or group of persons has certain knowledge in the field of information technology."
  ],
  "evidence_urls": [
    "https://eng.lsm.lv/article/society/crime/12.10.2023-police-schools-will-receive-algorithms-to-deal-with-threat-e-mails.a527451/"
  ],
  "extra": {
    "category_raw": "Bomb Threat",
    "extra": {
      "extra": {
        "extra": {
          "evidence": [
            "The article reports a recent wave of threatening emails sent to schools across Latvia.",
            "Police confirm similar incidents also occurred in Poland and the USA.",
            "Police have created informational protocols outlining how schools should handle future email threats.",
            "Latvian authorities identify the attack vector as originating from local 'unfiltered networks', complicating mitigation."
          ]
        }
      }
    }
  },
  "follow_up_by_country": [
    {
      "country": "Latvia",
      "notes": "Police provided guidance and algorithms for responding to e-mail threats at educational institutions.",
      "status": "Official Statement"
    }
  ],
  "headline": "Police: schools will receive algorithms to deal with threat e-mails",
  "is_continuous": true,
  "location_text": "Latvia",
  "media_assets": [
    {
      "captured_at": "2025-11-23T15:55:38.536617Z",
      "description": "Screenshot capture",
      "hash": "d9e15554e93b8738968885faed1d06bc10e3197567f8015982c8a485346f3f5d",
      "mime": "image/jpeg",
      "origin": "restore",
      "size_bytes": 2629942,
      "source_url": null,
      "type": "screenshot",
      "url": "/media/event_14_1763913338_075ab280.jpg"
    }
  ],
  "notes": "PL School Bomb Threats",
  "schema_version": "v1",
  "screenshot_count": 1,
  "sources": [
    "https://eng.lsm.lv/article/society/crime/12.10.2023-police-schools-will-receive-algorithms-to-deal-with-threat-e-mails.a527451/"
  ],
  "summary_short": "Latvian schools targeted by mass threat e-mails; police introduce protocols to manage such incidents.",
  "url": "https://eng.lsm.lv/article/society/crime/12.10.2023-police-schools-will-receive-algorithms-to-deal-with-threat-e-mails.a527451/"
}

{
  "5th Column of Russians Inside (which countries)": "",
  "Attack Type": "Bomb Threat",
  "Borders Including Sea, Air,  Violation or Sabotage (which countries)": "",
  "Continuous? (e.g. Jammers)": "",
  "Country (FI;EE;LV;LT;PL;BSR;Air)\nSeparated by Semicolon": "PL",
  "Date": "13-Oct-23",
  "Defense Prep Event (FI-EE-LV-LT-PL)": "",
  "Defense Prep Event (FI-EE-LV-LT-PL) REF LINK": "",
  "Follow-Up Link?  (FI,EE,LV,LT,PL, BSR, Air)": "",
  "Follow-Up NOTES": "",
  "Follow-Up incl. Investigation, Prosecution?  (FI,EE,LV,LT,PL, BSR, Air)": "",
  "Latitude, Longitude (WGS84, Decimal Degrees)": "",
  "NOTES": "PL School Bomb Threats",
  "Political Disruptions w/ Laws to Favor Kremlin (which countries)": "",
  "Russian-Belarus Terrorist Event (FI-EE-LV-LT-PL)": "BOMB Threats: Schools in Poland. This article says that Poland is receiving School Bomb Threats, as well. It's about Latvian Police helping with bomb threats using email algorithms.",
  "Russian-Belarus Terrorist Event (FI-EE-LV-LT-PL) REF LINK": "https://eng.lsm.lv/article/society/crime/12.10.2023-police-schools-will-receive-algorithms-to-deal-with-threat-e-mails.a527451/",
  "Screen Snapshot": "",
  "Screen Snapshots": "",
  "Type Dropdown": "",
  "Where?\n(Air, Land, Sea)": ""
}