← All Incident Reports
Incident report · Armed Conflict
Shaping activity - Probing · Testing Response

Baltic GNSS: harm without an incident

Satellite navigation interference around the Baltic became persistent enough that Finnair suspended an entire route for a month, after two flights turned back mid-approach. Estonian controllers logged more than 600 pilot reports in April 2024 alone. The jammers, one of them said, run essentially all the time.

An RAF aircraft carrying the UK Defence Secretary was affected near Kaliningrad. There is no single incident here to investigate, which is precisely what makes it difficult.

↓  Download one-page brief (PDF)
Who
Attribution: Estonia, Finland and other regional states attribute the interference to Russia. Estonia's then foreign minister Margus Tsahkna said the source was Russia and named areas near St Petersburg, Kaliningrad and Pskov, stating Estonia had proof; he did not make that evidence public. Germany's defence ministry pointed to Kaliningrad. Moscow did not comment on the accusations at the time. Casualties: none.
What
Persistent jamming and spoofing of Global Navigation Satellite System signals across the Baltic region, degrading civil aviation, maritime navigation and any service depending on satellite positioning or timing.
Where
The Baltic Sea and neighbouring states, with the European Union Aviation Safety Agency also identifying the Kaliningrad region, the Black Sea, the Caspian and the eastern Mediterranean near Cyprus, Turkey, Lebanon, Syria, Israel and northern Iraq as areas of increased interference since February 2022.
When
Escalating from 2022 and sharply worse through 2024. An RAF Falcon 900LX carrying Defence Secretary Grant Shapps was affected near Kaliningrad on 13 March 2024. Finnair suspended Helsinki to Tartu flights from 29 April to 31 May 2024, resuming on 2 June.
Why
Not established publicly. Interference on this scale is consistent with the protection of military assets, but the effect falls on civil aviation and shipping across an entire region regardless of intent.
How
Jamming drowns the satellite signal; spoofing supplies a false one. Aircraft carry alternative navigation systems, but airports whose approach procedures depend on satellite signals - Tartu among them - have no usable fallback until a different approach is installed.
What happened
1

13 March 2024 - a ministerial aircraft

An RAF Falcon 900LX carrying the UK Defence Secretary is affected near Kaliningrad on an official trip to Poland, with interference reported on both legs of the journey and the aircraft using other means to determine its position.

2

25 and 26 April - two aborted approaches

Two Finnair flights from Helsinki abandon their approach to Tartu and return to Helsinki. Tartu lies around 40 km from the Russian border and its approach procedures depend on a satellite signal.

3

29 April - a route suspended

Finnair suspends daily flights to Tartu until 31 May so that an alternative approach not requiring a satellite signal can be installed. Finnair is the only airline operating international flights there.

4

The scale becomes visible

Estonian air navigation services report more than 600 pilot reports in April alone, with jammers operating essentially continuously. Tens of thousands of civilian flights are reported as affected over the preceding months.

5

2 June - service resumes

Flights resume once an alternative navigation method for the landing approach is in place. Estonia raises the issue with the EU and NATO; its foreign minister warns that the interference is dangerous enough that it will eventually cause a crash.

Impact
Safety
Two flights turned back mid-approach. Aircraft carry alternative systems and pilots are briefed, but an airport whose only approach procedure depends on a satellite signal has no fallback at all until one is engineered.
Economic
An international air route to Estonia's second city was suspended for over a month. The cost is borne by an airline and a regional economy, neither of which has any means of stopping the cause.
Political
A NATO defence minister's aircraft was affected in flight. Estonia took the issue to the EU and NATO. Attribution is asserted by the affected states and unresolved in any formal sense.
Adversary gain
Continuous, deniable degradation of civil infrastructure across a region, with no single incident to investigate, no casualty to prosecute and no discrete act to point at. The effect accumulates while remaining below any threshold that would compel a response.
Why this resists the usual machinery
No incident

Nothing discrete to investigate

There is no crater, no vessel to board, no arrest to make. The harm is a degraded environment rather than an event, so the apparatus of investigation and prosecution has nothing to grip.

No casualty

The threshold is never crossed

Flights divert, approaches are abandoned, routes are suspended. Nobody is hurt, so nothing compels the response that a single crash would.

No border

The effect ignores the line

A transmitter inside one state degrades navigation across several others, so no single jurisdiction owns either the cause or the consequence.

This is the purest example of the pattern the rest of this library circles. Real harm, continuously delivered, with nothing to investigate and nobody to charge. The Warsaw-Lublin IED was calibrated to stay below the casualty threshold; this never approaches a threshold at all, because there is no moment at which it happens.

Assessment
1

Attribution is asserted by the affected states and not formally resolved

Estonia, Finland and Germany have pointed to Russia and to specific areas, and Estonia's foreign minister said proof existed without making it public. Russia did not comment at the time. On the open record this is an attribution made by governments rather than one established by an independent process, and it should be reported as such.

2

The vulnerability is dependence, and it is nearly universal

Satellite positioning and timing underpin aviation approaches, maritime navigation, telecommunications synchronisation, financial timestamping and the electricity grid. Most organisations have no idea how many of their dependencies terminate at a satellite signal.

3

Redundancy is what actually resolved it

The route reopened when a ground-based approach procedure was installed at Tartu. The interference did not stop. The only control that worked was not needing the signal, and that is available to anyone willing to engineer it in advance.

4

Continuous degradation is harder to answer than a discrete attack

A single act produces evidence, a victim and an investigation. This produces a worse aggregate outcome and none of those things, which is why it has continued for years while individual incidents elsewhere have triggered NATO consultations.

5

Nothing here creates any pressure to stop

The interference has run for years, imposed real cost, and produced no consequence for whoever is responsible. There is no incident to investigate, no casualty to prosecute and no border to point at. It is almost certain that satellite navigation interference continues across these regions, and unlikely that it ends through attribution rather than through users engineering their way out of the dependency.

The number that makes the point

More than 600 pilot reports in a single month from one small country's air navigation service, and jammers described as operating essentially continuously. There is no incident here to report, which is exactly why it works.

What should carry
  • Find your satellite dependencies before you need to. Timing and positioning sit underneath far more systems than most registers record - synchronisation, logging, scheduling and access control among them.
  • Engineer the fallback in advance. Tartu reopened because a ground-based approach was installed. Every dependency on a satellite signal should have an answer that does not involve one.
  • Treat degradation as an operating condition, not an incident. Interference is persistent in these regions. Procedures, training and route planning should assume it rather than react to it.
  • Report it even when nothing happens. The 600 reports in a month are what made the scale visible. Individually each was a nuisance; collectively they were the evidence.
  • Extend the thinking to shipping and logistics. Maritime navigation is affected in the same areas, and supply chains crossing the Baltic, Black Sea and eastern Mediterranean carry the same exposure.
  • Do not wait for attribution to be settled. It has not been resolved in several years of degradation, and resilience measures that wait for it will not be taken.
Sources

Compiled from open-source reporting for professional security discussion. Attribution to Russia is made by the affected states and has not been established by any independent process; Russia did not comment on the accusations at the time. This is a protective-security lessons-learned assessment, not an operational account.