Photographing NATO bases, reconnaissance radars, identifying supporters of Ukraine and setting fire to defence facilities – the cases revealed in 2026 in Lithuania, Latvia and Estonia show the intersection of espionage, sabotage and influence operations. The main threat is posed by Russian services, but the intelligence services of Belarus and China are besides active. Contractors receive tasks via communicators or during visits to Russia.