Alleged cigarette smugglers — not hybrid threat agents — were behind the mysterious Belarusian weather balloons that recently spooked Lithuania into shutting its border and declaring a national emergency.

Lithuanian authorities said Tuesday they had detained 21 people, allegedly members of a criminal group, on suspicion of smuggling cigarettes from Belarus with the use of GPS-equipped balloons.

The general prosecutor’s office said in a statement that the alleged network was “characterized by a very strict conspiracy and distribution of roles,” and that “the organizers may have had direct contacts with accomplices operating in the Republic of Belarus, from where, under favorable weather conditions, balloons with smuggled cigarettes were launched.”

Lithuanian authorities said GPS tracking had allowed the balloons to be monitored “and the exact coordinates of their landing in Lithuania were transmitted to the executors.”

The country declared a nationwide state of emergency last week over the balloons after closing its border with Belarus in October. Lithuanian Foreign Minister Kęstutis Budrys told POLITICO at the time that the car-sized balloons carrying smuggled cigarettes into the country’s airspace constituted “hybrid activities,” even if they were not direct security threats.

European Commission President Ursula von der Leyen also condemned the balloon incursions from Belarus, saying on Dec. 1 that “Such hybrid attack by the Lukashenko regime is completely unacceptable.”

According to Lithuanian Interior Ministry data, at least 600 balloons and 200 drones have entered Lithuania’s airspace so far in 2025, disrupting more than 300 flights, affecting 47,000 passengers and leading to around 60 hours of airport closures.

The arrests of the alleged cigarette smugglers come as frontline countries on the EU’s eastern flank with Russia plead with Brussels to accelerate its upcoming border defense initiatives in the face of opposition from some European capitals.