Loading signal...
Signal
Submitted
Feb 1, 2026, 00:14 UTC
Coordinated bomb threat emails forced school closures across Lithuania, Latvia, and Estonia in October 2023 amid suspicions of hostile state origin.
In mid-October 2023, a coordinated mass email campaign sent bomb threats to schools and kindergartens across the Baltic states of Lithuania, Latvia, and Estonia, resulting in class cancellations, notably in Estonia's Tartu city. Lithuania's police chief identified hundreds of emails originating from a European Union server, mostly in Russian with political overtones. Officials highlighted the threats aimed to destabilize institutions and sow mistrust, with the Lithuanian Interior Minister cautioning against panic. Authorities believe the sender has been active for about a year, sending similar threats, and investigations involve cooperation with the U.S. and Poland. This incident reflects increasing cyberhostility against the Baltic region amid geopolitical tensions with Russia.
Confidence: High
The event clearly describes hostile aggressor activity via coordinated bomb threat emails targeting Baltic schools with intent to cause panic and destabilize institutions. Multiple Baltic authorities attribute the attack to hostile state actors, consistent with hybrid warfare cyber intimidation tactics.
Source URL
https://apnews.com/article/lithuania-latvia-estonia-school-bomb-threats-582484480759aeb84a2e9506335390ec
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "cd124a17-0a94-48a9-bf4b-15262f150a63",
"url": "https://apnews.com/article/lithuania-latvia-estonia-school-bomb-threats-582484480759aeb84a2e9506335390ec",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Information Operations",
"incident_type": "Unknown",
"country": "Lithuania",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"bomb threats",
"schools",
"baltic sea region",
"cyber intimidation",
"Russia",
"offensive cyber operations",
"Estonia",
"Lithuania",
"Latvia"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [],
"where_text": "Cyberspace",
"headline": "Barrage of bomb threats emailed to schools cancels classes across the Baltic countries",
"description": "Between late October 11 and October 12, 2023, schools and kindergartens throughout Lithuania, Latvia, and Estonia received hundreds of threatening bomb threat emails. Lithuania's police chief Renatas Pozela described it as a coordinated mass spam attack originating from a server inside the European Union, with messages mostly in Russian and containing some political content. The threats led to the cancellation of classes in many schools, especially in Tartu, Estonia. Lithuanian Interior Minister Agne Bilotaite and a Lithuanian security agency spokesperson noted the threats were intended to cause panic and likely originated from hostile states aiming to disrupt Baltic institutions and stoke mistrust. Authorities in Latvia, Lithuania, and Estonia, collaborating with the U.S. and Poland, are investigating the incidents, suspecting the same individual has been active for about a year sending similar threats to various organizations.",
"summary_short": "Coordinated bomb threat emails forced school closures across Lithuania, Latvia, and Estonia in October 2023 amid suspicions of hostile state origin.",
"summary_extended": "In mid-October 2023, a coordinated mass email campaign sent bomb threats to schools and kindergartens across the Baltic states of Lithuania, Latvia, and Estonia, resulting in class cancellations, notably in Estonia's Tartu city. Lithuania's police chief identified hundreds of emails originating from a European Union server, mostly in Russian with political overtones. Officials highlighted the threats aimed to destabilize institutions and sow mistrust, with the Lithuanian Interior Minister cautioning against panic. Authorities believe the sender has been active for about a year, sending similar threats, and investigations involve cooperation with the U.S. and Poland. This incident reflects increasing cyberhostility against the Baltic region amid geopolitical tensions with Russia.",
"actor_primary": null,
"target_primary": null,
"location_text": "Schools and kindergartens across Lithuania, Latvia, and Estonia, including Tartu city in Estonia",
"location_region": null,
"location_coordinates_lat": 55.169438,
"location_coordinates_lon": 23.881275,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The event clearly describes hostile aggressor activity via coordinated bomb threat emails targeting Baltic schools with intent to cause panic and destabilize institutions. Multiple Baltic authorities attribute the attack to hostile state actors, consistent with hybrid warfare cyber intimidation tactics.",
"event_time_utc": "2023-10-12T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-02-01T00:14:47.072Z",
"updated_at": "2026-11-08T21:52:51.193Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "moderate",
"attribution_confidence_band": "medium",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Oct 12, 2023, 00:00 UTC
Event time confidence
pm24h
Location
Schools and kindergartens across Lithuania, Latvia, and Estonia, including Tartu city in Estonia
Country
Lithuania
Tags
bomb threats, schools, baltic sea region, cyber intimidation, Russia, offensive cyber operations, Estonia, Lithuania, Latvia
Nodes
Node 1: Borders, Node 2: 5th Column
Signal
Submitted
Feb 1, 2026, 00:14 UTC
Coordinated bomb threat emails forced school closures across Lithuania, Latvia, and Estonia in October 2023 amid suspicions of hostile state origin.
In mid-October 2023, a coordinated mass email campaign sent bomb threats to schools and kindergartens across the Baltic states of Lithuania, Latvia, and Estonia, resulting in class cancellations, notably in Estonia's Tartu city. Lithuania's police chief identified hundreds of emails originating from a European Union server, mostly in Russian with political overtones. Officials highlighted the threats aimed to destabilize institutions and sow mistrust, with the Lithuanian Interior Minister cautioning against panic. Authorities believe the sender has been active for about a year, sending similar threats, and investigations involve cooperation with the U.S. and Poland. This incident reflects increasing cyberhostility against the Baltic region amid geopolitical tensions with Russia.
Confidence: High
The event clearly describes hostile aggressor activity via coordinated bomb threat emails targeting Baltic schools with intent to cause panic and destabilize institutions. Multiple Baltic authorities attribute the attack to hostile state actors, consistent with hybrid warfare cyber intimidation tactics.
Source URL
https://apnews.com/article/lithuania-latvia-estonia-school-bomb-threats-582484480759aeb84a2e9506335390ec
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "cd124a17-0a94-48a9-bf4b-15262f150a63",
"url": "https://apnews.com/article/lithuania-latvia-estonia-school-bomb-threats-582484480759aeb84a2e9506335390ec",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Information Operations",
"incident_type": "Unknown",
"country": "Lithuania",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"bomb threats",
"schools",
"baltic sea region",
"cyber intimidation",
"Russia",
"offensive cyber operations",
"Estonia",
"Lithuania",
"Latvia"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [],
"where_text": "Cyberspace",
"headline": "Barrage of bomb threats emailed to schools cancels classes across the Baltic countries",
"description": "Between late October 11 and October 12, 2023, schools and kindergartens throughout Lithuania, Latvia, and Estonia received hundreds of threatening bomb threat emails. Lithuania's police chief Renatas Pozela described it as a coordinated mass spam attack originating from a server inside the European Union, with messages mostly in Russian and containing some political content. The threats led to the cancellation of classes in many schools, especially in Tartu, Estonia. Lithuanian Interior Minister Agne Bilotaite and a Lithuanian security agency spokesperson noted the threats were intended to cause panic and likely originated from hostile states aiming to disrupt Baltic institutions and stoke mistrust. Authorities in Latvia, Lithuania, and Estonia, collaborating with the U.S. and Poland, are investigating the incidents, suspecting the same individual has been active for about a year sending similar threats to various organizations.",
"summary_short": "Coordinated bomb threat emails forced school closures across Lithuania, Latvia, and Estonia in October 2023 amid suspicions of hostile state origin.",
"summary_extended": "In mid-October 2023, a coordinated mass email campaign sent bomb threats to schools and kindergartens across the Baltic states of Lithuania, Latvia, and Estonia, resulting in class cancellations, notably in Estonia's Tartu city. Lithuania's police chief identified hundreds of emails originating from a European Union server, mostly in Russian with political overtones. Officials highlighted the threats aimed to destabilize institutions and sow mistrust, with the Lithuanian Interior Minister cautioning against panic. Authorities believe the sender has been active for about a year, sending similar threats, and investigations involve cooperation with the U.S. and Poland. This incident reflects increasing cyberhostility against the Baltic region amid geopolitical tensions with Russia.",
"actor_primary": null,
"target_primary": null,
"location_text": "Schools and kindergartens across Lithuania, Latvia, and Estonia, including Tartu city in Estonia",
"location_region": null,
"location_coordinates_lat": 55.169438,
"location_coordinates_lon": 23.881275,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The event clearly describes hostile aggressor activity via coordinated bomb threat emails targeting Baltic schools with intent to cause panic and destabilize institutions. Multiple Baltic authorities attribute the attack to hostile state actors, consistent with hybrid warfare cyber intimidation tactics.",
"event_time_utc": "2023-10-12T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-02-01T00:14:47.072Z",
"updated_at": "2026-11-08T21:52:51.193Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "moderate",
"attribution_confidence_band": "medium",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Oct 12, 2023, 00:00 UTC
Event time confidence
pm24h
Location
Schools and kindergartens across Lithuania, Latvia, and Estonia, including Tartu city in Estonia
Country
Lithuania
Tags
bomb threats, schools, baltic sea region, cyber intimidation, Russia, offensive cyber operations, Estonia, Lithuania, Latvia
Nodes
Node 1: Borders, Node 2: 5th Column