Latvian defense data among highest digital vulnerability in Europe, warns FOTI study

Cyber & Information WarfareCyber AttacksAttacks on critical infrastructure (energy, transport, hospitals)

Defense

Summary

FOTI study finds Latvia's defense digital systems among Europe's most vulnerable due to heavy reliance on US cloud providers and legacy Russian tech in rail signaling, posing security risks.

According to a 2026 FOTI report cited by Euronews, Latvia is among European states with the highest level of digital vulnerability in defense due to strong dependency on US-based cloud infrastructure providers, which operate under US CLOUD Act jurisdiction enabling potential foreign access to military data. Recent incidents like Microsoft's 2025 blocking of ICC accounts highlight the real risks. Alongside this Western tech dependency, legacy Russian-origin signaling and train control solutions used in Latvian railways add a double-sided security challenge. The European Defence Agency is working on building independent military cloud infrastructure by 2030 to reduce such vulnerabilities. Meanwhile, Latvian authorities continue gradual modernization but the digital sovereignty issue remains a critical strategic concern.

Classification

Confidence: High

The report highlights digital vulnerabilities and external legal controls over Latvia's defense data due to reliance on US tech providers and legacy Russian systems. It does not describe an active hostile attack but warns of real risks and ongoing defensive modernization efforts, indicating defense preparation rather than aggressor actions.

Source URL

https://puaro.lv/kars/latvijas-aizsardzibas-dati-augstakaja-digitalas-ievainojamibas-zona-eiropa-liecina-petijums

Open source

Provenance

Publisher: extension
Submitted: Apr 23, 2026, 16:45 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Apr 17, 2026, 00:00 UTC

Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "60854732-3223-4d70-a4bb-446d459d9a66",
  "url": "https://puaro.lv/kars/latvijas-aizsardzibas-dati-augstakaja-digitalas-ievainojamibas-zona-eiropa-liecina-petijums",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Latvia",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "Latvia",
    "digital vulnerability",
    "military cloud",
    "US CLOUD Act",
    "offensive cyber operations",
    "Russian legacy infrastructure",
    "FOTI report",
    "military data security"
  ],
  "nodes": [
    "Node 1: Borders",
    "Node 2: 5th Column"
  ],
  "countries": [
    "Latvia"
  ],
  "where_text": "Cyberspace",
  "headline": "Latvian defense data among highest digital vulnerability in Europe, warns FOTI study",
  "description": "A recent FOTI think tank study highlights Latvia among European countries with the highest digital vulnerability in defense systems, largely due to dependence on US cloud service providers like Microsoft, Amazon Web Services, Google, and Oracle. These companies are subject to US CLOUD Act laws, allowing US authorities legal access to data even if stored in Europe. Historical incidents such as Microsoft's 2025 blocking of International Criminal Court prosecutor accounts under US sanctions demonstrate that such risks are concrete. Moreover, Latvia relies on some legacy Russian-origin signaling and train movement control systems in its rail infrastructure, adding a second dimension of risk. Experts warn that without independent military cloud infrastructure by 2030, European defense systems including Latvia's will remain vulnerable to external political and legal pressures, both from adversaries and allies.",
  "summary_short": "FOTI study finds Latvia's defense digital systems among Europe's most vulnerable due to heavy reliance on US cloud providers and legacy Russian tech in rail signaling, posing security risks.",
  "summary_extended": "According to a 2026 FOTI report cited by Euronews, Latvia is among European states with the highest level of digital vulnerability in defense due to strong dependency on US-based cloud infrastructure providers, which operate under US CLOUD Act jurisdiction enabling potential foreign access to military data. Recent incidents like Microsoft's 2025 blocking of ICC accounts highlight the real risks. Alongside this Western tech dependency, legacy Russian-origin signaling and train control solutions used in Latvian railways add a double-sided security challenge. The European Defence Agency is working on building independent military cloud infrastructure by 2030 to reduce such vulnerabilities. Meanwhile, Latvian authorities continue gradual modernization but the digital sovereignty issue remains a critical strategic concern.",
  "actor_primary": "FOTI think tank",
  "target_primary": null,
  "location_text": "Latvian railways signaling and train movement control systems",
  "location_region": null,
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Approximate",
  "is_aggressor_signal": false,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The report highlights digital vulnerabilities and external legal controls over Latvia's defense data due to reliance on US tech providers and legacy Russian systems. It does not describe an active hostile attack but warns of real risks and ongoing defensive modernization efforts, indicating defense preparation rather than aggressor actions.",
  "event_time_utc": "2026-04-17T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "exact",
  "created_at": "2026-04-23T16:45:00.041Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "exact",
  "severity_band": "moderate",
  "attribution_confidence_band": "medium",
  "attribution_basis": "independent_sources"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: MediumIndependence confirmedTime: ExactLocation: Approximate

Source reliability

Info credibility

Event time

Apr 17, 2026, 00:00 UTC

Event time confidence

exact

Location

Latvian railways signaling and train movement control systems

Primary actor

FOTI think tank

Country

Latvia

Countries

Latvia

Tags

Latvia, digital vulnerability, military cloud, US CLOUD Act, offensive cyber operations, Russian legacy infrastructure, FOTI report, military data security

Nodes

Node 1: Borders, Node 2: 5th Column

Loading signal...

{ "id": "60854732-3223-4d70-a4bb-446d459d9a66", "url": "https://puaro.lv/kars/latvijas-aizsardzibas-dati-augstakaja-digitalas-ievainojamibas-zona-eiropa-liecina-petijums", "source": "extension", "status": "approved", "category": "Cyber & Information Warfare", "subcategory": "Cyber Attacks", "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)", "country": "Latvia", "source_reliability": "B", "info_credibility": "3", "tags": [ "Latvia", "digital vulnerability", "military cloud", "US CLOUD Act", "offensive cyber operations", "Russian legacy infrastructure", "FOTI report", "military data security" ], "nodes": [ "Node 1: Borders", "Node 2: 5th Column" ], "countries": [ "Latvia" ], "where_text": "Cyberspace", "headline": "Latvian defense data among highest digital vulnerability in Europe, warns FOTI study", "description": "A recent FOTI think tank study highlights Latvia among European countries with the highest digital vulnerability in defense systems, largely due to dependence on US cloud service providers like Microsoft, Amazon Web Services, Google, and Oracle. These companies are subject to US CLOUD Act laws, allowing US authorities legal access to data even if stored in Europe. Historical incidents such as Microsoft's 2025 blocking of International Criminal Court prosecutor accounts under US sanctions demonstrate that such risks are concrete. Moreover, Latvia relies on some legacy Russian-origin signaling and train movement control systems in its rail infrastructure, adding a second dimension of risk. Experts warn that without independent military cloud infrastructure by 2030, European defense systems including Latvia's will remain vulnerable to external political and legal pressures, both from adversaries and allies.", "summary_short": "FOTI study finds Latvia's defense digital systems among Europe's most vulnerable due to heavy reliance on US cloud providers and legacy Russian tech in rail signaling, posing security risks.", "summary_extended": "According to a 2026 FOTI report cited by Euronews, Latvia is among European states with the highest level of digital vulnerability in defense due to strong dependency on US-based cloud infrastructure providers, which operate under US CLOUD Act jurisdiction enabling potential foreign access to military data. Recent incidents like Microsoft's 2025 blocking of ICC accounts highlight the real risks. Alongside this Western tech dependency, legacy Russian-origin signaling and train control solutions used in Latvian railways add a double-sided security challenge. The European Defence Agency is working on building independent military cloud infrastructure by 2030 to reduce such vulnerabilities. Meanwhile, Latvian authorities continue gradual modernization but the digital sovereignty issue remains a critical strategic concern.", "actor_primary": "FOTI think tank", "target_primary": null, "location_text": "Latvian railways signaling and train movement control systems", "location_region": null, "location_coordinates_lat": null, "location_coordinates_lon": null, "location_precision": "Approximate", "is_aggressor_signal": false, "signal_type": "DEFENSE_PREP_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The report highlights digital vulnerabilities and external legal controls over Latvia's defense data due to reliance on US tech providers and legacy Russian systems. It does not describe an active hostile attack but warns of real risks and ongoing defensive modernization efforts, indicating defense preparation rather than aggressor actions.", "event_time_utc": "2026-04-17T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "exact", "created_at": "2026-04-23T16:45:00.041Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "approximate", "time_precision_band": "exact", "severity_band": "moderate", "attribution_confidence_band": "medium", "attribution_basis": "independent_sources" }