Estonia Arrests Record 16 Russian Intelligence Collaborators

Ordinary People, Extraordinary Pressure
What stands out about this record bust is who was caught. KAPO Director General Margo Palloson confirmed that the 16 individuals were not government insiders or officials with access to classified material. Most were everyday people — regular citizens with no connection to sensitive state information.
That detail is telling. Palloson explained that Russia's Federal Security Service, the FSB, and its military intelligence arm, the GRU, have shifted their recruitment strategy precisely because operating directly on Estonian soil is no longer a viable option. Rather than targeting high-value insiders, they are casting a wider net, looking for what KAPO spokeswoman Marta Tuul called "easier agents" — people willing to carry out small, specific tasks without needing deep access or expertise.
The good news, Palloson noted, is that none of the 16 managed to cause meaningful harm. Their activities were identified and shut down early enough to prevent any significant damage to Estonian security.

Social Media, Vandalism, and Border Traps
Russia's playbook has also evolved in other ways. After Estonia cracked down on Kremlin-linked media outlets like Baltnews and Sputnik, Moscow pivoted — moving much of its influence operation onto social media platforms. Tuul noted that these platforms are now being used to find "one-off agents," individuals recruited for isolated acts, including vandalism. One notable target was the Sinimäed, or Blue Hills, memorial site in northeastern Estonia — a place of deep historical significance tied to Estonian resistance against Soviet forces during World War II.
The risks don't stop online. KAPO's report also flags that travel to Russia itself carries real dangers, with recruitment attempts sometimes beginning right at border crossing points. Beyond recruitment, Russian actors have used social media to spread disinformation, including fabricated bomb threats targeting Estonian schools and false claims of an attack on Narva, a city in the country's east that sits just across the border from Russia.
Taken together, the picture is one of a relentless, adaptive intelligence campaign — and a security service that, at least for now, is staying one step ahead.