Signal
Submitted
Mar 13, 2026, 18:21 UTC
On March 2, 2026, Latvian Security Service (VDD) referred two individuals for prosecution for arson attacks on railway infrastructure in August 2025, linked to Russian interests.
The Latvian State Security Service (VDD) on March 2, 2026, initiated criminal prosecution against two individuals for malicious arson attacks on railway infrastructure objects in Latvia in August 2025. The sabotage targeted railway relay cabinets and locomotives, causing significant damage. Initially investigated by Latvian State Police starting late August 2025, the suspects were detained in early September 2025. During investigation, VDD found evidence linking the acts to Russian interests, and took over the case in October 2025. The perpetrators recorded the arson incidents and sent videos to their handlers, who used them in psychological operations presenting the attacks as events in Ukraine. VDD assesses the objective was to create an illusion of Russian military successes, intimidate Ukraine and its allies, and pressure Ukraine into conceding to Russia's illegal demands. Both suspects are held in custody, charged with aiding Russian aggression against Ukraine and intentional destruction of property by arson. Latvian authorities emphasize presumed innocence until guilt is legally established.
Confidence: High
The event clearly describes hostile sabotage activity on Latvian infrastructure linked to Russian interests and attempts to conduct psychological operations; this constitutes aggressor hostile action. There is no mention of defensive measures described in the event itself.
Source URL
https://vdd.gov.lv/aktualitates/jaunumi/vdd-rosina-kriminalvajasanu-pret-divam-personam-par-launpratigu-dedzinasanu-krievijas-intereses
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "5f965b74-c8f4-49a3-8773-afbc42e44555",
"url": "https://vdd.gov.lv/aktualitates/jaunumi/vdd-rosina-kriminalvajasanu-pret-divam-personam-par-launpratigu-dedzinasanu-krievijas-intereses",
"source": "hwt_web_submit",
"status": "approved",
"category": "Terrorism & Criminal Proxy Tactics",
"subcategory": "Terrorism",
"incident_type": "Bomb threats, assassination plots, targeted killings",
"country": "Latvia",
"source_reliability": "A",
"info_credibility": "3",
"tags": [
"sabotage",
"arson",
"railway infrastructure",
"Latvia",
"Russian interests",
"psychological operations",
"hybrid warfare",
"VDD",
"counterintelligence",
"criminal prosecution"
],
"nodes": [
"Node 1: Borders"
],
"countries": [],
"where_text": "Land",
"headline": "Latvian Security Service Initiates Criminal Proceedings Against Two Individuals for Malicious Arson Supporting Russian Interests",
"description": "On March 2, 2026, the Latvian State Security Service (VDD) initiated criminal prosecution against two persons suspected of maliciously setting fire to objects belonging to Latvia’s railway infrastructure in service of Russian interests. The investigation revealed multiple cases of arson targeting railway relay cabinets and locomotives in August 2025, causing significant damage. The Latvian State Police opened criminal proceedings at the end of August 2025, and with VDD support, detained the two suspects in early September 2025. Evidence linked the acts to Russian interests, and VDD took over the investigation in October 2025. The suspects filmed the acts and sent video footage to their handlers, who used it in psychological operations misrepresenting these fires as events in Ukraine. According to VDD, the purpose was to create the illusion of Russian military successes to intimidate Ukraine and its allies, encouraging Ukraine to concede to illegal Russian demands. Both suspects face charges under Latvian criminal law for aiding Russian aggression against Ukraine and intentional destruction of property by arson. Both are currently held in custody. VDD reminds that no one is considered guilty until proven so in accordance with the law.",
"summary_short": "On March 2, 2026, Latvian Security Service (VDD) referred two individuals for prosecution for arson attacks on railway infrastructure in August 2025, linked to Russian interests.",
"summary_extended": "The Latvian State Security Service (VDD) on March 2, 2026, initiated criminal prosecution against two individuals for malicious arson attacks on railway infrastructure objects in Latvia in August 2025. The sabotage targeted railway relay cabinets and locomotives, causing significant damage. Initially investigated by Latvian State Police starting late August 2025, the suspects were detained in early September 2025. During investigation, VDD found evidence linking the acts to Russian interests, and took over the case in October 2025. The perpetrators recorded the arson incidents and sent videos to their handlers, who used them in psychological operations presenting the attacks as events in Ukraine. VDD assesses the objective was to create an illusion of Russian military successes, intimidate Ukraine and its allies, and pressure Ukraine into conceding to Russia's illegal demands. Both suspects are held in custody, charged with aiding Russian aggression against Ukraine and intentional destruction of property by arson. Latvian authorities emphasize presumed innocence until guilt is legally established.",
"actor_primary": null,
"target_primary": null,
"location_text": "Latvia",
"location_region": null,
"location_coordinates_lat": 56.879635,
"location_coordinates_lon": 24.603189,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The event clearly describes hostile sabotage activity on Latvian infrastructure linked to Russian interests and attempts to conduct psychological operations; this constitutes aggressor hostile action. There is no mention of defensive measures described in the event itself.",
"event_time_utc": "2025-08-31T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-03-13T18:21:00.540Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
3
Event time
Aug 31, 2025, 00:00 UTC
Event time confidence
pm24h
Location
Latvia
Country
Latvia
Tags
sabotage, arson, railway infrastructure, Latvia, Russian interests, psychological operations, hybrid warfare, VDD, counterintelligence, criminal prosecution
Nodes
Node 1: Borders
Signal
Submitted
Mar 13, 2026, 18:21 UTC
On March 2, 2026, Latvian Security Service (VDD) referred two individuals for prosecution for arson attacks on railway infrastructure in August 2025, linked to Russian interests.
The Latvian State Security Service (VDD) on March 2, 2026, initiated criminal prosecution against two individuals for malicious arson attacks on railway infrastructure objects in Latvia in August 2025. The sabotage targeted railway relay cabinets and locomotives, causing significant damage. Initially investigated by Latvian State Police starting late August 2025, the suspects were detained in early September 2025. During investigation, VDD found evidence linking the acts to Russian interests, and took over the case in October 2025. The perpetrators recorded the arson incidents and sent videos to their handlers, who used them in psychological operations presenting the attacks as events in Ukraine. VDD assesses the objective was to create an illusion of Russian military successes, intimidate Ukraine and its allies, and pressure Ukraine into conceding to Russia's illegal demands. Both suspects are held in custody, charged with aiding Russian aggression against Ukraine and intentional destruction of property by arson. Latvian authorities emphasize presumed innocence until guilt is legally established.
Confidence: High
The event clearly describes hostile sabotage activity on Latvian infrastructure linked to Russian interests and attempts to conduct psychological operations; this constitutes aggressor hostile action. There is no mention of defensive measures described in the event itself.
Source URL
https://vdd.gov.lv/aktualitates/jaunumi/vdd-rosina-kriminalvajasanu-pret-divam-personam-par-launpratigu-dedzinasanu-krievijas-intereses
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "5f965b74-c8f4-49a3-8773-afbc42e44555",
"url": "https://vdd.gov.lv/aktualitates/jaunumi/vdd-rosina-kriminalvajasanu-pret-divam-personam-par-launpratigu-dedzinasanu-krievijas-intereses",
"source": "hwt_web_submit",
"status": "approved",
"category": "Terrorism & Criminal Proxy Tactics",
"subcategory": "Terrorism",
"incident_type": "Bomb threats, assassination plots, targeted killings",
"country": "Latvia",
"source_reliability": "A",
"info_credibility": "3",
"tags": [
"sabotage",
"arson",
"railway infrastructure",
"Latvia",
"Russian interests",
"psychological operations",
"hybrid warfare",
"VDD",
"counterintelligence",
"criminal prosecution"
],
"nodes": [
"Node 1: Borders"
],
"countries": [],
"where_text": "Land",
"headline": "Latvian Security Service Initiates Criminal Proceedings Against Two Individuals for Malicious Arson Supporting Russian Interests",
"description": "On March 2, 2026, the Latvian State Security Service (VDD) initiated criminal prosecution against two persons suspected of maliciously setting fire to objects belonging to Latvia’s railway infrastructure in service of Russian interests. The investigation revealed multiple cases of arson targeting railway relay cabinets and locomotives in August 2025, causing significant damage. The Latvian State Police opened criminal proceedings at the end of August 2025, and with VDD support, detained the two suspects in early September 2025. Evidence linked the acts to Russian interests, and VDD took over the investigation in October 2025. The suspects filmed the acts and sent video footage to their handlers, who used it in psychological operations misrepresenting these fires as events in Ukraine. According to VDD, the purpose was to create the illusion of Russian military successes to intimidate Ukraine and its allies, encouraging Ukraine to concede to illegal Russian demands. Both suspects face charges under Latvian criminal law for aiding Russian aggression against Ukraine and intentional destruction of property by arson. Both are currently held in custody. VDD reminds that no one is considered guilty until proven so in accordance with the law.",
"summary_short": "On March 2, 2026, Latvian Security Service (VDD) referred two individuals for prosecution for arson attacks on railway infrastructure in August 2025, linked to Russian interests.",
"summary_extended": "The Latvian State Security Service (VDD) on March 2, 2026, initiated criminal prosecution against two individuals for malicious arson attacks on railway infrastructure objects in Latvia in August 2025. The sabotage targeted railway relay cabinets and locomotives, causing significant damage. Initially investigated by Latvian State Police starting late August 2025, the suspects were detained in early September 2025. During investigation, VDD found evidence linking the acts to Russian interests, and took over the case in October 2025. The perpetrators recorded the arson incidents and sent videos to their handlers, who used them in psychological operations presenting the attacks as events in Ukraine. VDD assesses the objective was to create an illusion of Russian military successes, intimidate Ukraine and its allies, and pressure Ukraine into conceding to Russia's illegal demands. Both suspects are held in custody, charged with aiding Russian aggression against Ukraine and intentional destruction of property by arson. Latvian authorities emphasize presumed innocence until guilt is legally established.",
"actor_primary": null,
"target_primary": null,
"location_text": "Latvia",
"location_region": null,
"location_coordinates_lat": 56.879635,
"location_coordinates_lon": 24.603189,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The event clearly describes hostile sabotage activity on Latvian infrastructure linked to Russian interests and attempts to conduct psychological operations; this constitutes aggressor hostile action. There is no mention of defensive measures described in the event itself.",
"event_time_utc": "2025-08-31T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-03-13T18:21:00.540Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
3
Event time
Aug 31, 2025, 00:00 UTC
Event time confidence
pm24h
Location
Latvia
Country
Latvia
Tags
sabotage, arson, railway infrastructure, Latvia, Russian interests, psychological operations, hybrid warfare, VDD, counterintelligence, criminal prosecution
Nodes
Node 1: Borders