Armed escorts in masks pushed a group of migrants from Belarus toward Latvia and threatened Latvian soldiers, and hours later masked people crossed into Latvia and stole border surveillance cameras, Latvian Interior Minister Jānis Dombrava said on 6 October. Latvia's military described the incident as part of a continuing hybrid campaign on the border, and Ukraine's foreign minister blamed Moscow.

Russia keeps probing the EU's eastern defenses with migrants pushed from its own soil and through its ally Belarus, alongside drone incursions and sabotage that ISW has linked into one Russian pattern across Europe.

Armed escorts threatened Latvian soldiers

Latvian soldiers stopped at least 20 migrants trying to cross the border illegally from Belarus, the Latvian National Armed Forces said. Masked escorts led the group, and this time they were armed, threatened the soldiers, and urged and drove the migrants toward Latvia, the military said.

"Unlike many previous incidents, this time the provocation was particularly demonstrative and aggressive," Dombrava said.

The incident confirms that deliberate provocations and hybrid threats on the border will continue, the armed forces said. Illegal migration is being used as a tool to pressure Latvia's border and, with it, the external border of the EU and NATO, they added.

Belarus began funneling migrants toward the EU in 2021, a campaign Poland's government called a hybrid attack in which the migrants end up as weapons. In 2023, Finland closed its border crossings with Russia, accusing Moscow of the same tactic, and by mid-July Latvia had logged 111 straight days of migrants pushed across from Belarus.

Masked people stole the cameras

Several hours after the standoff, people in masks entered Latvian territory, damaged a distribution cabinet, and stole surveillance cameras, Dombrava said. They returned to Belarus before the border guard patrol could arrive.

"Belarus should understand that such incidents could lead to more serious consequences for Belarus itself," he said.

Ukrainian Foreign Minister Andrii Sybiha said Ukraine stands in full solidarity with Latvia. "Make no mistake: Moscow is behind it," he wrote, adding that Russian President Vladimir Putin "deliberately weaponizes migration, with the help of Lukashenka, to destabilise Europe."

Tunnels, tear gas, and damaged cameras on the border

Latvia's border guards stopped 11,384 attempts to cross illegally from Belarus between the start of 2026 and 24 September. In January, Latvia's armed forces and border guard published evidence that Belarusian security agencies were organizing illegal migration across the border. Latvia has also recorded deliberate damage to cables, distribution cabinets, and camera poles on its eastern border, aimed at slowing the rollout of an automated border control system.

Explore further

Stop arming Ukraine or we shut down your defense firms, pro-Kremlin group tells Latvia, Poland, and Portugal

On 22 July, Latvian soldiers fired warning shots and used tear gas against migrants trying to cross. The next day, Prime Minister Andris Kulbergs said Russia and Belarus were stepping up their hybrid war against the Baltic States to distract from Russia's failures in Ukraine. Latvia temporarily halted crossings on the Belarus border on 31 July. In August, Latvian guards found the first tunnel dug from Belarus and turned back 15 migrants who used it.

EU foreign policy chief Kaja Kallas has warned that Russia is intensifying hybrid operations across Europe, citing sabotage attempts, airspace violations and Russian drones and missiles crossing into Moldovan territory.

Her intervention adds pressure for a more coordinated European response to hostile activity below the threshold of conventional warfare.

Russia is putting lives at risk across Europe through an expanding campaign of hybrid activity, EU foreign policy chief Kaja Kallas said on Monday, after another series of Russian drones and missiles entered Moldovan airspace.

Speaking in Brussels alongside Moldovan Prime Minister Vasile Tofan and Enlargement Commissioner Marta Kos, Kallas said Europe had experienced an increase in sabotage attempts and airspace violations during recent weeks.

“Russian missiles and drones violated Moldovan airspace again over the weekend,” she said, describing the incidents as unacceptable.

According to the official EU record of the press conference, Kallas said the Kremlin was seeking to create fear and interfere with European decision-making, and argued that the response should include greater resilience and continued support for Ukraine.

Her remarks follow Russia’s renewed large-scale attacks against Ukraine’s energy system and continued reports of drones crossing borders beyond Ukrainian territory.

Moldova’s defence authorities reported that three drones entered Moldovan airspace during Russia’s 30 September attack on Ukraine. Moldova, which shares a long border with Ukraine and is seeking EU membership, has repeatedly accused Moscow of attempting to destabilise the country.

The latest incidents broaden a European debate that has been developing for months: how governments should respond to hostile operations that are deliberate and potentially dangerous but fall short of an overt military attack.

EU Today reported on 28 September that European governments were discussing an emergency security protocol intended to improve coordination when member states face sabotage and other hybrid threats.

That followed earlier warnings concerning suspected attacks on infrastructure, cyber operations, interference campaigns and airspace violations across several European countries.

The problem is partly one of attribution and partly one of thresholds.

A conventional armed attack on a NATO member may trigger consultation under Article 4 or, in sufficiently serious circumstances, collective defence provisions under Article 5. The European Union also has its own mutual assistance provision under Article 42.7 of the Treaty on European Union.

Hybrid activity is frequently designed to remain below those thresholds.

Cyberattacks, covert sabotage, GPS interference, disinformation, drones and operations conducted through intermediaries can impose costs without giving governments an obvious basis for a military response.

Kallas’s warning comes as Germany has also reported an increase in activity it attributes to Russia.

Chancellor Friedrich Merz has warned that Germany faces growing hybrid pressure involving drones and cyber operations. European security services have separately investigated suspected Russian involvement in sabotage and attacks on infrastructure in several countries.

Moscow has denied Western accusations that it is directing such operations.

The EU has already used sanctions against individuals and entities accused of Russian hybrid activity, while governments are considering faster systems for sharing intelligence and attributing incidents.

EU Today examined the debate in September as the European Parliament considered proposals for quicker attribution, stronger intelligence-sharing and improved protection of critical infrastructure.

Moldova occupies a particularly exposed position.

The EU has provided €317 million through the European Peace Facility for Moldovan defence modernisation, according to Kallas, including €120 million allocated in 2026 for air defence. Brussels is also supporting Moldova through its EU Partnership Mission, which provides assistance against hybrid and cyber threats.

Unlike Ukraine, Moldova is not a NATO member and has constitutional neutrality. Its ability to counter Russian missiles or drones entering its airspace is therefore closely connected to the development of its own detection and air-defence capabilities.

For the EU, repeated incidents involving Moldova, NATO airspace and European infrastructure are increasingly being considered as parts of the same security problem rather than isolated events.