Updated daily at 09:00 (EET) Index 5.2 ↑ +0.3 elevated
Issue of September 22, 2026 · TuesdayNo. 112

Latvia: a yellow notice of a possible airspace threat declared in Krāslava Municipality, NATO mission fighters activated

5.2/10 elevated ↑ +0.3vs. previous issue
In this issue ▾
  1. Top stories of the day
  2. By area, in detail
  3. Contradictions and discrepancies
  4. Escalation risk assessment (0–10)
  5. Sources

Issue of 22 September 2026 — covering 21 – 22 September 2026

Note: the evening of 21 September brought air alerts back to two NATO countries at once: Krāslava Municipality in Latvia received its first cell-broadcast yellow notice of a possible airspace threat in this run of issues and NATO mission fighters were activated, while Poland scrambled aviation for the fifth time in a week and sent an RCB alert to 24 districts of Lublin Province. No airspace was violated, no weapon was used, and both alerts were lifted before midnight. The same night Vilnius Airport restricted operations from 23:25 to 02:40 because of marks the operator described as typical of balloons; in the morning Matulionis said there is still no confirmation of what they were. The same evening Onet, citing Poland's defence ministry, revealed that on 15 September an unauthorised drone had stayed for five minutes 500 metres from the Aegis Ashore missile defence base at Redzikowo, and that the military called the police through the 112 emergency number. On 22 September the Lithuanian president's chief adviser Deividas Matulionis said there is still no final confirmation from the United States on troops: "we cannot say precisely when they will arrive, in what numbers, or whether they will". Russia's north-west is absent from the defence ministry's overnight intercept tally for a third consecutive night. (Previous issue — 21 September 2026, risk 4.9/10.)


Top stories of the day

  1. 21.09 — Latvia: a yellow notice of a possible airspace threat declared in Krāslava Municipality, NATO mission fighters activated; all-clear in under two hours. On Monday evening Latvia's National Armed Forces (NBS) sent residents of Krāslava Municipality a cell-broadcast message about a possible airspace threat and activated fighters of the NATO Baltic Air Policing mission. The NBS wording: "No further action is currently necessary. Should the situation change, a cell broadcast will be issued with the required instructions." The alert level was yellow: stay informed, no shelter required. The State Fire and Rescue Service (VUGD) confirmed the end of the alert; according to LSM the yellow alert lasted less than two hours. Krāslava Municipality is in south-eastern Latvia, on the Belarusian border. Important: there is no report of an object found, of a crash, or of any weapon being used; what exactly was tracked has not been disclosed officially. This is the first air alert over Latvia in the windows of recent issues — previous brushes with the Baltic air contour were Lithuanian. Sources: LSM — Beidzies iespējamais gaisa telpas apdraudējums Krāslavas novadā (21.09.2026); NRA — Brīdinājums Krāslavas novadā: iespējams gaisa apdraudējums; aktivizēti NATO iznīcinātāji (21.09.2026).

  2. 21.09 — Poland: fifth scramble of the week and fourth RCB alert in seven days, covering 24 districts of Lublin Province; airspace not violated. The Operational Command of the Polish Armed Forces (DORSZ) said in the evening: "In connection with strikes carried out by the Russian Federation using air assault means on Ukrainian territory, military aviation began operating in Polish airspace." The action was preventive; ground-based air defence and radar reconnaissance systems were placed on alert. The RCB sent an alert to residents of 24 districts of Lublin Province, including Chełm, Zamość and Biała Podlaska: "ATTENTION! Russian air attack in Ukraine. Situation monitored. Polish aircraft operating in Polish airspace. Await further updates." The RMF24 item is timed 21 September, 21:41 (updated 23:36), WP at 21:43. Operations ended shortly after 23:00, with no violation of Polish airspace recorded. ⚠️ Contradiction with the previous issue's reading: yesterday's digest, closed before the evening, treated the absence of scrambles on 20 and 21 September as a "break in the cascade" and as the window's main stabilising fact. The cascade did not break: only 20 September was quiet, and on the 21st the run resumed. A correction has been entered in corrections.json. Sources: RMF24 — Alert RCB przy granicy. W przestrzeni powietrznej operowało polskie lotnictwo (21.09.2026); WP — "Stan gotowości". Polska poderwała myśliwce (21.09.2026).

  3. 21.09 — Poland: the 15 September episode revealed — an unauthorised drone spent five minutes 500 metres from the Aegis Ashore missile defence base at Redzikowo, and the military called 112. Onet, drawing on an answer from Poland's Ministry of National Defence, reported on the evening of 21 September: "On 15 September in the afternoon hours reconnaissance systems detected an unauthorised drone in the vicinity of the American missile defence base at Redzikowo." The flight lasted about five minutes at a distance of about 500 metres from the site. Instead of neutralising it immediately, the military activated a procedure in which the incident was reported through the 112 emergency number; the point from which the operator was controlling the aircraft was established, and the police and other services were notified. The ministry declined to say whether counter-drone or electronic warfare means were used, citing the security of the facility. The Redzikowo base is part of NATO's missile defence system and is protected jointly by US personnel and a special unit of the Polish Army, with primary responsibility on the Polish side. Verification: the originating source is single (Onet) on the basis of the ministry's answer; the RMF24, Interia, WP and Wprost items trace back to the same answer and are not independent confirmation. The drone's origin, its operator and the outcome for them have not been made public. Assessment: the event is dated 15 September and enters this digest as a disclosure of 21 September, not as a fresh incident. Sources: RMF24 — Dron nad amerykańską bazą w Polsce. Wojsko zadzwoniło na numer alarmowy 112 (21.09.2026); Interia — Redzikowo. Dron w pobliżu amerykańskiej bazy. Media: Wojsko zadzwoniło na 112 (21.09.2026).

  4. 22.09 — Lithuania: "we do not yet have final confirmation from the Americans" says the president's adviser on US troops; Nausėda talks joint production with Lockheed Martin in New York. LRT, 22 September, 08:47: Deividas Matulionis, chief adviser to President Gitanas Nausėda, said Washington still has no decision on the American presence in Lithuania: "We do not yet have final confirmation from the Americans. We cannot say precisely when they will arrive, in what numbers, or whether they will." The frame cited by LRT: roughly 80,000 US troops are currently in Europe, about 10,000 of them in Poland; a rotation of more than 1,000 US soldiers left Lithuania in early June and the arrival of replacements has been delayed; US heavy battalions have rotated through Lithuania since 2019. Lithuania's military commander Raimundas Vaikšnoras said he holds specific information about troop movements but cannot yet disclose it publicly. The same morning (LRT, 22 September, 08:00) President Nausėda met Lockheed Martin International president Jay Pitman in New York: "Lockheed Martin International established a Lithuanian subsidiary a year ago; now we should discuss joint manufacturing project development." Lithuania is positioned as part of the company's European supply chain. Important: defence minister Robertas Kaunas is in the United States from 20 to 26 September; as this issue closed there was still no published Pentagon decision on the next rotation — the gap remains open for a second day running. Sources: LRT — Matulionis: kol kas neturime galutinio patvirtinimo iš amerikiečių dėl karių buvimo (22.09.2026); LRT — Lietuva su JAV gynybos pramonės milžine "Lockheed Martin" tariasi dėl bendrų projektų (22.09.2026).

  5. 21.09 — Estonia: the FSB has imposed temporary movement restrictions in the border areas of the Slantsy and Kingisepp districts from 16 to 26 September. ERR, 21 September: the border directorate of the FSB's St Petersburg and Leningrad Oblast branch announced that the measures apply in the border areas of the Slantsy and Kingisepp districts from 16 to 26 September. They include a ban on small vessels on the Narva river between the mouths of the Bolshaya Cheryomukha and Kryusha rivers; a ban on movement at night outside populated places within the five-kilometre border strip; and a ban on hunting and on carrying firearms in that zone. The FSB's official justification is "preventing violations of border and migration regulations" and "protecting aquatic biological resources". Estonia's border representative Andris Viltsin said the Police and Border Guard Board knew of the measures in advance but received no formal notification; he characterised the restrictions as neither routine nor extraordinary, noting that "Russia has significantly stricter measures in place on a daily basis within a five-kilometre-wide area adjoining the border than Estonia does". Interior Minister Igor Taro: "Russia itself knows why it is implementing these measures." Important: the suggestions voiced in the piece that the restrictions are linked to the State Duma elections just held and to keeping citizens from leaving are the interlocutors' readings, not established fact; the official rationale goes no further than the FSB's wording. Sources: ERR — Russia imposes temporary movement restrictions on other side of Estonian border (21.09.2026); ERR (Russian) — Россия ввела беспрецедентные ограничения в приграничной зоне у Эстонии (21.09.2026).

  6. 21.09 — Lithuania/NATO: air policing fighters scrambled four times in a week to identify and escort Russian aircraft; one scramble identified a flock of birds. 15min, citing Lithuania's Ministry of National Defence, published 21 September, 18:03: over the past week NATO mission fighters scrambled four times to Russian aircraft breaking flight rules over the Baltic. On 14 September they escorted two Su-27s; on 17 September two Su-30SMs; on 18 September one Su-35, and later the same day they scrambled to identify MiG-31s, Su-35s and a civilian Tu-134. All the Russian aircraft flew without active transponders, without flight plans and without radio contact with regional air traffic control centres. On 15 September a scramble to identify unknown objects found a flock of birds; the same day mission fighters destroyed a drone that had entered Lithuanian airspace near the Kruonis pumped storage plant in Kaišiadorys district. Assessment: this is the routine weekly report rather than a new incident; it matters as a measure of background contact density. Sources: 15min — NATO naikintuvai keturiskart kilo atpažinti ir lydėti Rusijos orlaivių, kartą atpažino paukščius (21.09.2026).

  7. 21–22.09 — Latvia blocks the EU's delisting of Usmanov and Fridman; ambassadors fail to agree, deadline is midnight on 22 September. EU ambassadors failed late on 21 September to agree the renewal of individual sanctions and set a new meeting for 08:00 Brussels time on 22 September, hours before the measures were due to lapse. The disputed compromise: remove Russian businessmen Alisher Usmanov and Mikhail Fridman from the list while extending restrictions on roughly 3,000 individuals and entities for 36 months. France and Slovakia pushed for Usmanov's delisting, Luxembourg for Fridman's. Latvia was the only country not to accept the compromise. Foreign Minister Baiba Braže: "EU sanctions against Russia must be strengthened, not weakened. Therefore, Latvia cannot agree to the widely proposed suggestion." Ukraine opposed both delistings. Individual sanctions require unanimity; a temporary seven-day extension expired at midnight on 22 September. Assessment: not a military event, but a direct indicator of Riga's posture ahead of the Saeima election on 3 October. Sources: Kyiv Independent — EU fails to finalize Russia sanctions deal, ambassadors to reconvene Sept. 22 hours before deadline (22.09.2026).

  8. 21–22.09 — Lithuania: Vilnius Airport restricted operations from 23:25 to 02:40 over marks described as balloon-like; by morning there is no confirmation of what they were. LRT, published 21 September, 23:50, updated 22 September, 08:44: Lietuvos oro uostai (LTOU) said the restrictions began at 23:25, were first announced until 00:30, then extended until 02:45, and were actually lifted at 02:40. The operator called the cause a "hybrid attack by Belarus" and said the marks were typical of balloons. 15min, 21 September, 23:43 (updated 23:56): the National Crisis Management Centre, Darius Buta, gave a preliminary end of 02:45; a Lufthansa flight from Frankfurt and a Mavi Gök flight from Antalya diverted to Riga, and a Ryanair flight from Turin to Kaunas. VE/ELTA, 22 September, 06:34: 17 flights and about 3,182 passengers were affected, 12 flights diverted (4 to Riga, 1 to Warsaw, 7 to Kaunas), 3 departures delayed, 2 cancelled. LRT is softer ("a dozen or so"): a broader estimate, not a clash of figures. On Tuesday morning, on Žinių radijas, presidential adviser Deividas Matulionis said there is no confirmation of what was recorded; since early July meteorological balloons had practically stopped, and the situation had improved over three months. This is a separate morning statement, not the one in the LRT item on US troops (item 4). The airport reports do not mention fighters, and no weapon was used. There have been about ten similar disruptions this year, the last in June. ⚠️ The operator and the adviser diverge: LTOU speaks of balloons and a "hybrid attack by Belarus", Matulionis says there is no confirmation. We do not record the episode as an established balloon overflight. Sources: LRT — Virš Vilniaus oro uosto apribota veikla (21.09.2026), 15min — Vilniaus oro uoste ir vėl trikdžiai (21.09.2026), VE — Baltarusijos hibridinė ataka naktį laikinai stabdė Vilniaus oro uosto darbą (22.09.2026).


By area, in detail

Construction of military facilities and fortifications

  • No new kilometres of the Baltic Defence Line or the Eastern Shield dated 21–22 September were announced. The structural background is unchanged (context, not a fresh fact): the "Tarcza Wschód" frame is around €10 billion; for 2026 the military stated the task of covering some 200 km of border with engineering works, including about 20 km of fortifications, at state budget spending of some 500 million złoty; from mid-2026 allied forces are to be brought into the expansion of engineering infrastructure on the eastern border. No progress report dated within the window exists.
  • Poland — permanent US base: after the deputy minister's statement on 21 September (the "western wall", a prospective 15,000 US troops), no new decision, site or construction contract was announced in the window.
  • Poland — Redzikowo: no infrastructure decision, but the 15 September drone episode (item 3) has for the first time publicly raised the question of physically protecting an already completed missile defence site.

Deployments and movements of troops

  • Lithuania — US: no final confirmation from the Americans; the timing, the numbers and even the fact of a replacement rotation remain officially undetermined (item 4). Lithuania's military commander Vaikšnoras says he has non-public information about movements.
  • Poland — US: the 15,000 target and the permanent base remain a statement of intent (issue of 21.09); no redeployment was announced in the window.
  • Estonia — NATO aviation: the Estonian Air Force warned of low-level and supersonic flights with possible sonic booms from 21 to 27 September, daily from 10:00 to 22:00, at a minimum altitude of 152 metres (500 feet). The aircraft are Turkish Air Force F-16s and Spanish Air Force F/A-18s, based at Ämari (Estonia) and Šiauliai (Lithuania), with the area covering all three Baltic states. The Air Force asks that "the public not be alarmed by increased aircraft noise" and stresses that the flights are not linked to any specific incident.
  • Latvia — Namejs 2026: the nationwide frame continues to 8 October (around 12,000 troops and Zemessardze members); the Riga phase closed on 20 September. No episodes dated 21–22 September have been published.
  • Lithuania — "Perkūno griausmas 2026" continues to 15 October. ⚠️ A discrepancy in the figures — see the contradictions section.
  • Estonia — "Orkaan XX": the active phase ended on 20 September on the announced schedule; no after-action report is dated within the window.
  • Poland — "Czarny Obrońca '26" runs to 24 September. At 11:00 on 22 September the defence ministry announced a media day at Trzemeszno Lubuskie near Wędrzyn (Lubusz Province): deputy minister Paweł Bejda is to observe live fire (Leopard 2, Rosomak, artillery, F-16, AH-64 and industry prototypes). At the morning build there is no after-action report and no troop figure: this is an announcement, not a result. The exercise runs in the west and north, not at the Suwałki corridor.
  • Belarus: no new military events dated 21–22 September were found in non-registry sources. The staff exercise with Western Operational Command under Chief of the General Staff Pavel Muraveyko ran on the announced frame of 15–18 September (border protection, enforcement of martial law, countering saboteurs, and countering light aircraft and drones); there is still no non-registry confirmation that it has ended.

Agreements and spending

  • EU — sanctions: Latvia is blocking the delisting of Usmanov and Fridman, with a midnight deadline on 22 September (item 7).
  • Lithuania — Lockheed Martin: talk of moving from an investment frame to joint manufacturing projects; no documents were signed in the window (item 4). The bilateral procurement frame is about €2 billion from the US over three years (per LRT on 21.09).
  • Poland — US: President Karol Nawrocki, in New York for a Polish-American economic forum, promoted among other things a European service centre for PAC-3 missiles in Poland (RMF24, 21.09, 19:14). No decision has been taken and Germany is competing; some 200 businesspeople from both countries took part. No documents were signed in the window.
  • Estonia — the ammunition case: on 22 September (Postimees, 07:50) members of the Riigikogu national defence committee said the documents in the Datasel case present a picture markedly different from officials' public explanations, and called on law enforcement to open an investigation. The documents were presented to the committee last Thursday by the director of the State Defence Investment Centre (RKIK) Elmar Vaher, deputy director Asko Kivinuk and defence ministry deputy secretary general for capabilities Kadri Peeters. Earlier, on 21 September, the opposition (Helir-Valdor Seeder of Isamaa, Lauri Laats of the Centre Party, Lauri Läänemets of SDE and Martin Helme of EKRE) sent Prime Minister Kristen Michal a letter concerning ammunition transactions of roughly €91 million and demanding a parliamentary committee of inquiry. Verification: the allegations in the letter (conflict of interest, intermediaries, Signal correspondence) are claims by the opposition, not independently confirmed; the government gave no detailed public answer within the window.
  • Estonia — procurement transparency: the defence ministry will not disclose which companies received funds allocated for aid to Ukraine (ERR, 21.09).
  • Previously announced and unchanged (context): Lithuania 5.38% of GDP; Latvia around 4.91%; Estonia a floor of 5% of GDP (the 2026 budget at 5.4%). No new national figures appeared in the window.
  • Estonia — national defence development plan: the government hopes to approve the ten-year national defence development plan (to 2035) this autumn, once the state budget strategy (RES) is confirmed. State Chancellery communications adviser Maris Lindmäe: "The development plan must align military and non-military activities, priorities and funding with state budget decisions." The military component was presented to the Riigikogu defence committee back on 26 January 2026 with a promise to submit the plan by April; it is still not approved (ERR, 21.09).

Military aid and air defence / electronic warfare

  • Poland: the fifth scramble of the week on the evening of 21 September, an RCB alert in 24 districts, all-clear shortly after 23:00, no airspace violation (item 2). The pre-authorisation to fire, in force since 17.09, was again not used.
  • Latvia: a yellow notice for Krāslava Municipality and the activation of NATO mission fighters on the evening of 21 September; all-clear in under two hours, no weapon used, no object presented (item 1).
  • Lithuania — civil aviation: Vilnius Airport restricted operations from 23:25 to 02:40 over marks the operator called typical of balloons; 17 flights, about 3,182 passengers (item 8). Fighters do not appear in the airport reports, no weapon was used, and in the morning the president's adviser said there is no confirmation of what the marks were.
  • Baltic air defence: four scrambles in a week to escort Russian aircraft flying without transponders (item 6). The last kinetic episode over the Baltics remains dated 15 September (the shootdown near Pratkūnai/the Kruonis plant).
  • Estonia: scheduled mission flights at low level and supersonic speed on 21–27 September, Turkish F-16s and Spanish F/A-18s (see above).
  • NATO: no new deployments were announced in the window; Baltic Sentry and Eastern Sentry continue as ongoing operations.
  • Poland — equipment: Defence24 reported on 21 September that the Polish Armed Forces have received more than 300 Abrams tanks and that deliveries are entering their final stretch; the same day it reported plans to reinforce the Navy with fast interceptor boats carrying SPIKE NLOS missiles. Verification: contract details and the breakdown by version were not independently re-checked within the window; we present this as a trade publication's report.

Kaliningrad and Russia's border regions

  • Kaliningrad Oblast: the region does not appear in the Russian defence ministry's intercept tally for the night into 22 September (see below). No military events — exercises, firings or movements — dated 21 or 22 September were found in non-registry regional sources (Klops, Novy Kaliningrad); their feeds are taken up with election results, weather and delays at the Polish border for civilian traffic.
  • Leningrad Oblast and St Petersburg: Interfax, 22 September, 07:55 — the Russian defence ministry said 297 Ukrainian drones were destroyed overnight over Belgorod, Bryansk, Volgograd, Voronezh, Kursk, Lipetsk, Nizhny Novgorod, Rostov, Ryazan, Samara, Saratov, Smolensk, Tambov and Ulyanovsk oblasts and over Crimea. Leningrad, Pskov and Kaliningrad oblasts are not on the list — for a third consecutive night. No separate danger regime and no restrictions at Pulkovo for 21–22 September were found in non-registry sources. Verification of the figure: 297 comes from a single official source (the Russian defence ministry) with no independent count.
  • Pskov Oblast: absent from the intercept list; no new military events dated within the window were identified.
  • Leningrad Oblast — border regime: the FSB restrictions in the Slantsy and Kingisepp districts, 16–26 September (item 5), are the only dated Russian "border" action in the window, and they are a policing measure rather than a troop deployment.
  • Belarus: no new events dated within the window; there is still no non-registry source confirming the 15–18.09 staff exercise has ended. On the Lithuanian-Belarusian border 22 illegal migrants were turned back on 22 September (15min, LRT) — routine border statistics.

Statements by officials

  • Lithuania — D. Matulionis, chief adviser to the president (22.09, LRT): "We do not yet have final confirmation from the Americans. We cannot say precisely when they will arrive, in what numbers, or whether they will."
  • Lithuania — M. Sinkevičius, prime minister (22.09, 15min on the BBC Newsnight appearance): if Lithuania were attacked, "we would resist… we would engage". He called the threats from Russia concrete: "We experience them and this is our real reality." He said plans exist for various scenarios, including the organised evacuation of elderly people from cities, but that not everything is discussed openly: "We consider various scenarios, but not all are widely discussed publicly." Verification: the account of the BBC interview is given by a Lithuanian outlet; the verbatim British transcript was not checked within the window.
  • Lithuania — G. Nausėda (22.09): "Lockheed Martin International established a Lithuanian subsidiary a year ago; now we should discuss joint manufacturing project development."
  • Latvia — B. Braže, foreign minister (21–22.09): "EU sanctions against Russia must be strengthened, not weakened."
  • Estonia — I. Taro, interior minister (21.09): "Russia itself knows why it is implementing these measures."
  • Estonia — A. Viltsin, border representative (21.09): the restrictions are neither routine nor extraordinary; "Russia has significantly stricter measures in place on a daily basis within a five-kilometre-wide area adjoining the border than Estonia does."
  • Estonia — J. Vseviov, secretary general of the foreign ministry (21.09, Postimees): urged the public to "chill out" amid a wave of anxious social media posts about Poland, the Suwałki corridor and the Latvian and Estonian borders; his argument is that the state has the means to watch what happens across the border and knows when something is actually happening there. This is a commentary piece, not an official ministry statement.
  • Poland — DORSZ (21.09): "In connection with strikes carried out by the Russian Federation using air assault means on Ukrainian territory, military aviation began operating in Polish airspace."
  • Russia — defence ministry (22.09): 297 drones overnight; the north-western oblasts are not on the list.
  • NATO (context, outside the window): on 19 September in Copenhagen the chiefs of defence elected the Bundeswehr's inspector general, General Carsten Breuer, as chair of NATO's Military Committee; he succeeds Admiral Giuseppe Cavo Dragone in July 2027 for a three-year term. The event is dated 19 September and does not count among the window's fresh facts.

⚠️ Contradictions and discrepancies

  • The break in the Polish scramble series — the previous issue's reading did not hold. The 21 September issue, closed before the evening, described the absence of dated scrambles on 20 and 21 September as a "break in the cascade" and the window's main stabilising fact, and that reading worked to lower the score. On the evening of 21 September at 21:41 RMF24 and at 21:43 WP reported a new scramble and an RCB alert across 24 districts. In fact only 20 September passed without a dated episode. Yesterday's formulation was formally hedged as "as this issue closed", but the conclusion it supported turned out to be wrong: a correction has been entered in corrections.json. The score for 21 September is not recalculated; the factor is reflected in today's score.
  • "Perkūno griausmas 2026" — a discrepancy in numbers. Last week's issues carried the figure of up to 2,400 reservists called to units (with more than 5,000 contacted to update records). Overview material on the exercise also carries a figure of about 4,200 Lithuanian troops taking part. These are probably different units of count (reservists called up versus total participants including regulars), but there is no official summary dated 21–22 September that reconciles them. We give no single figure.
  • The drone near the Redzikowo base — a single originating source. The five minutes of flight, the distance of about 500 metres and the call to 112 trace back to one item (Onet) based on the defence ministry's answer; RMF24, Interia, WP and Wprost are reprints of that same answer, not independent confirmation. Because the confirming body is the relevant ministry, we accept the episode itself while flagging the single originating source. The drone's affiliation, the operator's identity, and whether electronic warfare means were used have not been disclosed officially.
  • The Krāslava alert — what was actually tracked has not been reported. The NBS declared a possible airspace threat and activated mission fighters; VUGD announced the all-clear. None of the reports names the type of object or mentions debris, a crash, or the use of a weapon. We do not record the episode as a violation of Latvian airspace: it is a notice of a possible threat, lifted in under two hours.
  • Vilnius Airport — the operator and the president's adviser diverge. LTOU called the restrictions a "hybrid attack by Belarus" and described the marks as typical of balloons; in the morning Matulionis said there is still no confirmation of what they were. The announced end was first 00:30, then 02:45; the restrictions were actually lifted at 02:40. The figure of 17 flights and about 3,182 passengers is the operator's count via ELTA; LRT is softer ("a dozen or so"), which is not a clash of figures. We do not record the episode as an established balloon overflight.
  • The FSB restrictions at the Estonian border — the rationale diverges from interlocutors' readings. The FSB's official justification is border and migration regulations and the protection of aquatic resources. The suggestions voiced in the Estonian coverage that the measures are tied to the State Duma elections just held and to keeping citizens from leaving are interlocutors' readings, not established fact; the quantitative estimates that accompany them are not independently confirmed and are not reproduced here.
  • Estonia's ammunition case — the status of the allegations. The claims in the opposition letter (conflict of interest, the role of intermediaries, Signal correspondence and a personal email account) are one side's allegations. On 22 September the Riigikogu national defence committee called on law enforcement to open an investigation; no prosecutorial decision to open a case falls within the window. The RKIK figures recorded earlier (contracts of roughly €59.8 million, advances of about €70 million) and the roughly €91 million cited in the letter refer to different sets of transactions and do not add up into a single indicator.
  • Belarus, status after 18 September. There is still no non-registry confirmation that the Western Operational Command staff exercise (announced frame 15–18 September) has ended, and there are no new reports for 21–22 September either. We record neither continuation nor conclusion as established fact.
  • Checking exercise editions and years. Namejs 2026 (2 September – 8 October), "Perkūno griausmas 2026" (17 September – 15 October), "Czarny Obrońca '26" (to 24 September), "Orkaan XX" and the concluded Strong Griffin 2026 are confirmed by current-year sources. "Zapad-2026" is not taking place (the exercise is quadrennial); "Ussisõnad-2026" is not independently confirmed and is not counted as a driver. The Belarusian-Kazakh "Forest Brotherhood 2026" (announced on 6 September) still has no end dates, numbers or content — no topic page is created.
  • Previously entered corrections remain in force: the Belarusian staff exercise of 15–18.09, the 13.09 overflight, Datasel S.R.L., the Belarusian readiness check from 11.09, and the phantom "Zapad-2026" and "Ussisõnad-2026".

📊 Escalation risk assessment (0–10): 5.2 / 10

Final score: 5.2 / 10. Up 0.3 from the previous issue. The nearest historical analogue remains a tense late Cold War standoff (≈3–4) with a persistent premium for NATO's use of a weapon over Lithuania on 15 September and for a war under way a few kilometres from the alliance's border. It is still well below Able Archer 1983 (≈7) and the run-ups to 2008/2014 (≈6–7): there are no casualties or destruction on NATO territory, no new shot has been fired, and no allied airspace was violated in the window.

Drivers on the Russian side and its ally's (dated within the window or immediately before it):

  • Air alerts returned to two NATO countries in a single evening — a yellow notice for Latvia's Krāslava Municipality with mission fighters activated, and the fifth Polish scramble of the week with an RCB alert across 24 districts. Both episodes follow from Russian strikes on Ukraine near the alliance's borders.
  • The disclosed episode near the Redzikowo missile defence base (15.09) — an unauthorised drone spent five minutes 500 metres from a NATO missile defence site. Even without established attribution, this demonstrates the vulnerability of fixed allied infrastructure; it enters the score as new information, not as a new event.
  • Density of contact in the air — four scrambles in a week to Russian aircraft flying without transponders, flight plans or radio contact (Su-27, Su-30SM, Su-35, MiG-31, Tu-134).
  • The FSB's tightened border regime opposite Estonia (16–26.09) — not a troop measure, but a unilateral closure of the border strip without formal notification of the neighbour, judged "not routine" by Estonia's border representative.
  • Unresolved uncertainty over Belarus — no non-registry confirmation that the Western Operational Command staff exercise has ended.
  • No new offensive or demonstrative Russian troop moves dated 21–22 September were identified in non-registry sources.

Drivers on the side of NATO and its individual members:

  • Deepening permanent US presence in Poland — the 15,000 target and a permanent base decision on a two-to-three-month horizon (statement of 21.09), plus Warsaw's bid for a European PAC-3 service centre. Long-term build-up that Moscow habitually reads as escalation; within the window it is words and negotiations only.
  • Industrial binding of Lithuania to the US defence sector — Nausėda's talks with Lockheed Martin on joint production, and the defence minister's visit to the Pentagon and Congress.
  • A week-long series of supersonic and low-level mission flights over all three Baltic states (21–27.09, Turkish F-16s and Spanish F/A-18s). The Estonian Air Force states plainly that these are scheduled and unconnected to any incident, yet sonic booms over a border country raise the ambient noise of tension by themselves.
  • Continuing nationwide exercises Namejs (to 8.10) and "Perkūno griausmas" (to 15.10).
  • Leadership rhetoric: Lithuania's prime minister publicly describes a fighting response and evacuation scenarios. This is domestic resilience-building, but it also raises the temperature of the public conversation.

Mutual / structural factors:

  • The Russia-Ukraine war as the source of both stray airframes and air defence regimes on either side; both of the 21 September evening alerts arose directly from strikes on Ukraine.
  • The unclosed US rotation gap in Lithuania alongside talk of a permanent base in Poland — an asymmetry within the eastern flank, now in a third day without a Pentagon decision.
  • Domestic political calendars on both sides: the completed State Duma elections, Latvia's Saeima election on 3 October, and Estonia's parliamentary conflict over defence procurement.
  • The sanctions knot in the EU: Latvia's lone veto against weakening the list is political escalation without a military component, but with a direct effect on the negotiating atmosphere.

Stabilisers (both sides):

  • No new kinetic contact with the NATO line: neither in Latvia nor in Poland was a weapon used, no airspace was violated, and both alerts were lifted the same evening.
  • No casualties or destruction on NATO territory.
  • Russia's north-western corner next to the Baltics is absent from the ministry's intercept tally for a third consecutive night; no danger regimes and no Pulkovo restrictions were announced.
  • A procedural rather than a firing response to the drone near the missile defence base: the military called the police through 112 and located the control point rather than opening fire near a strategic site.
  • Public de-escalatory rhetoric in Estonia: the foreign ministry's secretary general openly calls for lowering the level of alarm, pointing to the state's own observation of what happens across the border.
  • The FSB restrictions are a policing measure — bans on night movement, small boats and hunting, not a troop deployment.
  • Exercises are running to previously announced calendars, with active phases closing on schedule; nothing changes the absence of a major Russian-Belarusian strategic exercise in autumn 2026.
  • Neither Russia nor Belarus has announced military steps in response to the 15 September shootdown and the Lithuanian protest note.

Reasoning behind the score: the rise from 4.9 to 5.2 comes from three dated signals plus one correction to yesterday's reading. The correction: the series of Polish scrambles did not break — only 20 September was quiet, and aviation was airborne again on the 21st, so yesterday's 0.2 reduction rested on a fact that did not hold. First signal: in a single evening air alerts touched two allied countries, and for the first time in these windows one of them was Latvia, which widens the geography of contact beyond the Lithuanian-Polish contour. Second: it became known that an unauthorised drone operated for five minutes half a kilometre from a NATO missile defence base at Redzikowo — a fixed-site vulnerability, not an overflight above woodland. Third: the weekly count of scrambles to Russian aircraft without transponders holds at four in seven days. We do not go above 5.2: neither in Latvia nor in Poland was airspace violated or a weapon used, both alerts were lifted within hours, Russia's north-west has been outside the intercept tally for three nights, and the Polish military's response at Redzikowo was procedural. Vilnius is civil aviation and an unconfirmed mark, not a new kinetic class. Talk of a permanent US base and negotiations with the American defence industry are not counted upward — these are intentions on a horizon of months.

Delta against the previous issue: ↑ (+0.3) — 4.9 (21 September) → 5.2 (22 September). The reason for the rise: Polish scrambles resumed on the evening of 21 September (yesterday's "break in the cascade" did not hold), the first air alert over Latvia in these windows with NATO mission fighters activated, and the disclosed drone episode near the Redzikowo missile defence base.

Caveat: this is an analytical assessment based on open sources, not a forecast.


Sources