The ISS reports Russia's intensified hybrid tactics, Chinese intelligence expansion, increased cyber threats, and rising Islamist and right-wing extremism, emphasizing border vulnerabilities and national security challenges for Estonia in 2023-2024.

Military & Paramilitary OperationsConventional Military PressureUnknown

Aggressor

Summary

The Estonian Internal Security Service (ISS) published its 2023-2024 annual review outlining ongoing and emerging threats to Estonia's security. Russia remains the principal threat, actively employing hybrid warfare tactics including attacks on monuments, harassment and profiling at the Estonian-Russian border, and spreading disinformation, notably in Estonia's socioeconomically vulnerable border regions. Russian intelligence and security services have become more aggressive and overt. Chinese intelligence activities are described as broad-based and intense, with efforts centered on soft power via its embassy and intelligence recruitment, including targeting NATO secrets and Estonian citizens. Cybersecurity threats include ransomware and sabotage attempts linked to Russian and Belarusian actors, with a notable Iranian hacker attack on energy utility systems at year-end. The terrorism threat level is rising in Europe, with Islamist extremist influences expanding within Estonia's growing and ethnically diverse Muslim community, and signs of radicalization amid the Hamas-Israel conflict. Right-wing youth gatherings have also increased, while left-wing extremism is absent. Economic factors in border areas contribute to vulnerability to manipulation. The ISS emphasizes Estonia must remain a challenging environment for hostile intelligence services and underscores the need for public vigilance and preparedness.

Classification

Confidence: High

The report details explicit hostile and covert actions by Russian and Chinese intelligence services, hybrid attacks including physical harassment, disinformation, cyberattacks, and psychological operations, constituting active aggressor behavior against Estonia’s security landscape.

Source URL

https://news.err.ee/1609309593/internal-security-service-publishes-2023-2024-annual-review

Open source

Provenance

Publisher: csv-import
Submitted: Feb 13, 2026, 19:25 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Mar 10, 2023, 12:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "5f539fd5-d83f-443f-996a-97d607daed0c",
  "url": "https://news.err.ee/1609309593/internal-security-service-publishes-2023-2024-annual-review",
  "source": "csv-import",
  "status": "approved",
  "category": "Military & Paramilitary Operations",
  "subcategory": "Conventional Military Pressure",
  "incident_type": "Unknown",
  "country": "Estonia",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "Hybrid Warfare",
    "Intelligence",
    "Border Security",
    "offensive cyber operations",
    "China",
    "Hybrid Attacks",
    "Terrorism",
    "Islamist Extremism",
    "Right-Wing Extremism",
    "Socioeconomic Vulnerability",
    "Estonia-Russia Border",
    "Migration",
    "Disinformation"
  ],
  "nodes": [],
  "countries": [
    "Estonia"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "The Estonian Internal Security Service (ISS) published its 2023-2024 annual review outlining ongoing and emerging threats to Estonia's security. Russia remains the principal threat, actively employing hybrid warfare tactics including attacks on monuments, harassment and profiling at the Estonian-Russian border, and spreading disinformation, notably in Estonia's socioeconomically vulnerable border regions. Russian intelligence and security services have become more aggressive and overt. Chinese intelligence activities are described as broad-based and intense, with efforts centered on soft power via its embassy and intelligence recruitment, including targeting NATO secrets and Estonian citizens. Cybersecurity threats include ransomware and sabotage attempts linked to Russian and Belarusian actors, with a notable Iranian hacker attack on energy utility systems at year-end. The terrorism threat level is rising in Europe, with Islamist extremist influences expanding within Estonia's growing and ethnically diverse Muslim community, and signs of radicalization amid the Hamas-Israel conflict. Right-wing youth gatherings have also increased, while left-wing extremism is absent. Economic factors in border areas contribute to vulnerability to manipulation. The ISS emphasizes Estonia must remain a challenging environment for hostile intelligence services and underscores the need for public vigilance and preparedness.",
  "summary_short": "The ISS reports Russia's intensified hybrid tactics, Chinese intelligence expansion, increased cyber threats, and rising Islamist and right-wing extremism, emphasizing border vulnerabilities and national security challenges for Estonia in 2023-2024.",
  "summary_extended": null,
  "actor_primary": "Russian intelligence and security services",
  "target_primary": null,
  "location_text": "Narva, Võru County, Kunichina Gora, Shumilkino",
  "location_region": "Ida-Viru County and Võru County",
  "location_coordinates_lat": 59.3772,
  "location_coordinates_lon": 28.1862,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The report details explicit hostile and covert actions by Russian and Chinese intelligence services, hybrid attacks including physical harassment, disinformation, cyberattacks, and psychological operations, constituting active aggressor behavior against Estonia’s security landscape.",
  "event_time_utc": "2023-03-10T12:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-13T19:25:08.705Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "unknown",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "independent_sources"
}

Public assessmentReliability: StrongSeverity: SignificantAttribution: HighIndependence confirmedTime: UnknownLocation: Approximate

Source reliability

Info credibility

Event time

Mar 10, 2023, 12:00 UTC

Event time confidence

unknown

Location

Narva, Võru County, Kunichina Gora, Shumilkino

Region

Ida-Viru County and Võru County

Primary actor

Russian intelligence and security services

Country

Estonia

Countries

Estonia

Tags

Russia, Hybrid Warfare, Intelligence, Border Security, offensive cyber operations, China, Hybrid Attacks, Terrorism, Islamist Extremism, Right-Wing Extremism, Socioeconomic Vulnerability, Estonia-Russia Border, Migration, Disinformation

Loading signal...

{ "id": "5f539fd5-d83f-443f-996a-97d607daed0c", "url": "https://news.err.ee/1609309593/internal-security-service-publishes-2023-2024-annual-review", "source": "csv-import", "status": "approved", "category": "Military & Paramilitary Operations", "subcategory": "Conventional Military Pressure", "incident_type": "Unknown", "country": "Estonia", "source_reliability": "C", "info_credibility": "3", "tags": [ "Russia", "Hybrid Warfare", "Intelligence", "Border Security", "offensive cyber operations", "China", "Hybrid Attacks", "Terrorism", "Islamist Extremism", "Right-Wing Extremism", "Socioeconomic Vulnerability", "Estonia-Russia Border", "Migration", "Disinformation" ], "nodes": [], "countries": [ "Estonia" ], "where_text": "Land", "headline": null, "description": "The Estonian Internal Security Service (ISS) published its 2023-2024 annual review outlining ongoing and emerging threats to Estonia's security. Russia remains the principal threat, actively employing hybrid warfare tactics including attacks on monuments, harassment and profiling at the Estonian-Russian border, and spreading disinformation, notably in Estonia's socioeconomically vulnerable border regions. Russian intelligence and security services have become more aggressive and overt. Chinese intelligence activities are described as broad-based and intense, with efforts centered on soft power via its embassy and intelligence recruitment, including targeting NATO secrets and Estonian citizens. Cybersecurity threats include ransomware and sabotage attempts linked to Russian and Belarusian actors, with a notable Iranian hacker attack on energy utility systems at year-end. The terrorism threat level is rising in Europe, with Islamist extremist influences expanding within Estonia's growing and ethnically diverse Muslim community, and signs of radicalization amid the Hamas-Israel conflict. Right-wing youth gatherings have also increased, while left-wing extremism is absent. Economic factors in border areas contribute to vulnerability to manipulation. The ISS emphasizes Estonia must remain a challenging environment for hostile intelligence services and underscores the need for public vigilance and preparedness.", "summary_short": "The ISS reports Russia's intensified hybrid tactics, Chinese intelligence expansion, increased cyber threats, and rising Islamist and right-wing extremism, emphasizing border vulnerabilities and national security challenges for Estonia in 2023-2024.", "summary_extended": null, "actor_primary": "Russian intelligence and security services", "target_primary": null, "location_text": "Narva, Võru County, Kunichina Gora, Shumilkino", "location_region": "Ida-Viru County and Võru County", "location_coordinates_lat": 59.3772, "location_coordinates_lon": 28.1862, "location_precision": "Approximate", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The report details explicit hostile and covert actions by Russian and Chinese intelligence services, hybrid attacks including physical harassment, disinformation, cyberattacks, and psychological operations, constituting active aggressor behavior against Estonia’s security landscape.", "event_time_utc": "2023-03-10T12:00:00.000Z", "end_time_utc": null, "event_time_confidence": "unknown", "created_at": "2026-02-13T19:25:08.705Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "approximate", "time_precision_band": "unknown", "severity_band": "significant", "attribution_confidence_band": "high", "attribution_basis": "independent_sources" }