◈ Baltic Sonar — 2026-10-14

**BALTIC SECURITY INTELLIGENCE BRIEF** **Date:** 2026-10-14 **Overall Index:** 37/100 (BLUE) **Overall Assessment** The Baltic security environment remains stable with low immediate kinetic risk. The primary concern is the attribution of the "Black Rus" armed incursion into Latvia from Belarus, which introduces uncertainty regarding hybrid threat actors. Concurrent GNSS degradation events suggest potential electronic warfare (EW) testing or interference, though no confirmed hostile intent is established. **Most Notable Developments** The most significant development is the emergence of "Black Rus," a group claiming responsibility for an armed incursion into Latvia. This event triggers a multi-domain response involving border security, economic finance, and diplomatic channels. Simultaneously, multiple GNSS degradation events were recorded near coordinates (55.8, 22.5), (55.2, 23.9), (54.3, 23.6), (54.5, 28.3), (55.7, 23.2), and (58.5, 25.4). An orange coastal weather warning was issued for the northern Perämeri region in Finland. ASSESSMENT: The GNSS anomalies may be coincidental or indicative of low-level EW probing, but no direct link to the "Black Rus" incident is confirmed. **Correlated Clusters** Latvia exhibits a complex correlation across BORDER, ECONOMY_FINANCE, HYBRID, DIPLOMATIC, INFORMATION_OPS, and INTERNAL_THREAT domains. A multi-state cluster links NAVAL, GNSS_EW, DIPLOMATIC, and ECONOMY_FINANCE activities. Lithuania shows correlations in WEATHER, INFORMATION_OPS, ECONOMY_FINANCE, DIPLOMATIC, and INTERNAL_THREAT. Poland’s cluster involves CRITICAL_INFRASTRUCTURE, DIPLOMATIC, and HYBRID domains. Note: Correlation does not imply causation. **Narratives Present** No specific narratives were identified in the last 7 days. **Things to Monitor** 1. Attribution and operational capabilities of "Black Rus." 2. Persistence and scope of GNSS degradation events in the Baltic Sea region. 3. Diplomatic responses to the Latvian border incident.