Situational Briefing · Finland, Estonia, Latvia, Lithuania

Situation overview. The cycle's defining event is a drone incursion into Estonian and Latvian airspace in the early hours of 1 September: EDF's Col. Uku Arold confirmed drones moving parallel to both countries' eastern borders, public warnings issued ~03:00, Turkish F-16s at Ämari Air Base scrambled, warning lifted 05:30. This is best read as Ukraine-war spillover rather than a deliberate Russian probe — Russia's own Leningrad Oblast governor admitted 38 Ukrainian attack drones were downed that morning near Ust-Luga, consistent with the established pattern of GPS-jammed stray drones during Ukrainian strikes on Russian oil infrastructure. In parallel, Estonia moved to harden its cyber posture (quarantining .ru-origin emails to state institutions) and its institutional readiness took a domestic hit (National Audit Office findings triggering a temporary MoD takeover of EDF asset management). Defence-industrial and cross-border cooperation continued deepening. Risk Level: Medium · Sentiment: Negative (one unconfirmed-intent airspace incident without lasting physical impact, against a backdrop of continuing cyber escalation and institutional friction, only partly offset by deepening allied cooperation).

1Airspace/Drones/Hybrid

Drones breached Estonian and Latvian airspace overnight into 1 Sept, moving parallel to both states' eastern borders; NATO's Baltic Air Policing mission activated fighters per the Latvian Armed Forces' own statement, and Turkish jets from Ämari were scrambled FACT Estonian Defence Forces official statement (ERR), Latvian Armed Forces statement, corroborated by the Russian governor of Leningrad Oblast's admission of 38 drones downed near Ust-Luga that morning — adversary-side admission used only to confirm the physical drone activity, not its political framing. Assessed as Ukraine-war spillover (GPS jamming during Ukrainian strikes on Russian oil infrastructure), not a deliberate Russian incursion — consistent with prior 2026 alert patterns. Separately, a Finnish appellate court reversed course and ruled Finland does have jurisdiction over the Eagle S shadow-fleet cable-damage case (the Estlink 2 incident) FACT Yle, a meaningful accountability development for the Baltic Sea hybrid-sabotage track. The Estlink 1 cable's scheduled maintenance this week is routine, not hybrid-related — noted to avoid conflation. A dozen Russians are under investigation for suspected fraudulent acquisition of Finnish citizenship FACT Yle, single source.

2Deterrence & NATO

Estonia's National Audit Office identified serious inventory/accounting failures in the EDF; the Ministry of Defence will take temporary (6–12 month) control of EDF asset management to correct the record, per Minister Pevkur FACT ERR, ministerial statement. Sweden is sending military units to help Finland monitor its eastern border, per Swedish broadcaster SVT FACT SVT, cross-referenced via Yle. Continued rearmament signals: Finnish Defence Forces contracted locally-made FPV drones from Insta (~€14M) for conscript training, and Saab received an RBS 70 NG order from the Finnish Defence Forces Logistics Command FACT ERR/Helsinki Times, independent trade press; an Estonian defence firm is investing €200M in a Latvian plant, deepening cross-Baltic defence-industrial integration FACT ERR. Media reports of a planned CIA Director visit to Moscow remain single-sourced and were met with scepticism from a former Estonian Internal Security Service director UNCONFIRMED OPERATIONAL ESTIMATE. Estonia's foreign minister stated the country's formal threat assessment "has not changed" FACT ERR.

3Russian Factor

Estonia will quarantine incoming emails from Russian (.ru) servers to state institutions, citing an "exponential" rise in Russia-linked cyberattacks since 2022 and successful attacks already suffered by Latvia's and Lithuania's public sectors FACT ERR, ministerial statement. An Estonian defence official assessed Russia as "struggling to protect strategic sites," in the context of continuing Ukrainian long-range strikes on Russian energy infrastructure FACT ERR, official assessment; contextual. Think-tank commentary from CEPA's Elisabeth Braw was picked up by UK outlets on Russian preparations for hybrid attacks against the UK and NATO ANALYSIS commentary, not a new incident. The reignited US–Iran war is a background factor whose implications for Russian risk calculus on the eastern flank are not yet clear ANALYSIS.

4Domestic Politics

Estonia: Ülle Madise stands as the only registered candidate in the presidential election; PM Michal dismissed opposition "catastrophe narratives," and ERR's political journalists assessed no snap Riigikogu election is imminent and the minority government remains functional FACT ERR. Finland: an SME survey put Finns Party leader Riikka Purra as the public's favourite for the next PM FACT single poll, ERR. Former PM Siim Kallas (carryover from R9) was given a state funeral with full honours on 29 Aug, closing out that item. Latvia and Lithuania produced no significant coalition-related coverage in this week's feed — flagged as a coverage gap (feed skewed toward Estonian/Finnish public-broadcaster sources) rather than forced into a "no news" signal.

Carryover / priority items for next cycle

• EDF/MoD temporary asset-management handover — watch for implementation and any further audit findings.
• Eagle S cable case — now proceeding on jurisdiction; watch for trial developments.
• Estonian presidential election — confirm formal outcome once concluded.
• Reported CIA Director Moscow visit — watch for confirmation or denial; do not upgrade past UNCONFIRMED without an official statement.
• Long-range air-defence decision flagged for September budget talks (carried from R9) — still pending; DUE calibration item — user to confirm before resolving.
• 1 Sept drone incursion — watch for any formal NATO/Estonian attribution statement beyond the current "likely stray Ukrainian drone" assessment.