French and US maritime patrol planes are watching the western Black Sea, where drones keep hitting merchant ships, Romanian outlet Curs de Guvernare reported on 19 October, citing flight-tracking data. Romania blames Russia for the attacks, while Bulgaria says it cannot prove who launched them.

Ukraine’s three small Danube ports have kept its grain exports from collapsing further, and Russia has pounded those ports since the summer. The ships serving them are now being hit in the economic zones of two NATO members. Many were anchored near or heading to the Sulina Canal, which links the Danube to the sea. That puts the allied patrols over these waters in the middle of the fight over Ukraine’s grain trade.

Two patrol planes over the western Black Sea

A French Navy Atlantique 2 maritime patrol plane arrived in Constanța, Romania’s main Black Sea port, on the evening of 18 October, Curs de Guvernare said. On 24 October, French Foreign Minister Jean-Noël Barrot said in the Bulgarian port of Varna that a French patrol plane had been operating in the area under NATO for two weeks and had contributed to rescue operations.

Meanwhile, a US Navy P-8A Poseidon flew into Varna from Sicily on 18 October, AFP reported, citing flight-tracking data. Two days later, Bulgarian Prime Minister Rumen Radev said it had begun reconnaissance patrols after Sofia asked allies for help, and that some allies had responded quickly. Bulgarian Defense Minister Dimitar Stoyanov called the deployment a joint decision of Bulgaria and NATO. He said the plane cannot strike targets and passes its data to NATO, Anadolu Agency reported.

NATO promises more

On 20 October, NATO’s North Atlantic Council met at Romania’s request. Afterward, the alliance said it would send more maritime patrol aircraft, radar systems, and drones to the Black Sea. NATO military spokesman Col. Martin O’Donnell added that allies have sent or will send intelligence personnel and explosives-forensics teams. NATO itself has not attributed the attacks to any country.

Romania names Russia, Bulgaria hedges

Romania has been blunter. On 15 October, after four merchant ships were hit within a day, acting Foreign Minister Oana Țoiu wrote on X that “Russia bears full responsibility for these developments.” On 17 October, Romanian F-16s shot down two jet-powered Russian Geran drones near Sulina, Romania’s Defense Ministry said.

Unitățile aeriene și navale ale Gărzii de Coastă (GdC/MAI) și ale Inspectoratului General pentru Situații de Urgență (IGSU/MAI) sunt implicate activ în operațiunile de căutare și salvare, în vederea găsirii membrilor dați dispăruți ai echipajului navei care a fost atacată în…

— Toiu Oana (@oana_toiu) October 15, 2026

On 23 October, a drone sank the cargo ship Khoryv off Constanța, killing a Ukrainian sailor, and President Nicușor Dan blamed Russia too. “It is part of Russia’s escalation process in its war in Ukraine,” Dan said.

Bulgaria is more cautious. Radev told parliament on 14 October that the attacks worked in Russia’s favor but that Sofia could not prove it. Since taking office in May, he has sought a thaw in ties with Moscow.

A Sofia court has cleared European arrest warrants for two 19-year-old Germans charged with setting fire to Starlink antennas south of the Bulgarian capital, a court spokeswoman told dpa. Prosecutors named the pair in court, but both had already left Bulgaria. The case adds Bulgaria to a run of attacks on Starlink sites in Europe, which Poland and Lithuania have linked to Russia.

While Russia presses its assault along the front and strikes Ukraine’s cities, Starlink keeps Ukraine’s drone units and front-line troops connected, and Poland pays about $50 million a year for its terminals. The network’s ground links in Europe are now a target in their own right, and ISW has linked the Polish fire to a wider Russian pattern of sabotage. Each attack on a ground station hits a network whose speed caps already disrupted Ukraine’s drone missions this month.

Two names, a few hours in Bulgaria

Prosecutors identified the suspects as Zeka Islam and Tirpan Beytullah, Bulgaria’s state news agency BTA reported, noting the names may be misspelled. Their whereabouts are unknown, according to German authorities cited by the agency. They were charged in absentia on 14 October and face three to 12 years in prison if convicted.

According to the indictment, the two crossed from Serbia at the Kalotina checkpoint at 17:37 on 9 October and told border officers they were tourists. At about 22:25, wearing gloves and masks, they allegedly set fire to antennas at the Plana teleport, a satellite ground station near the village of Plana. They drove back into Serbia through the same checkpoint at 23:55.

Three antennas burned completely, two were partly damaged, and three more were affected, prosecutors say. The pair traveled in a Volkswagen with German plates, and a national warrant followed two days after the charges, ZDF reported.

The court-appointed lawyers argued that investigators had pinned down the vehicle, not the men in it. The court rejected those objections, finding reasonable grounds to suspect the pair. The lawyers said they would appeal. The ruling can be challenged within three days.

An opposition MP made the fire public three days later

The fire became public only on 12 October, when opposition MP Ivaylo Mirchev of Democratic Bulgaria posted about it on Facebook. He said 11 antennas had been set on fire, more than prosecutors later counted.

In parliament two days later, Prime Minister Rumen Radev asked the head of the State Agency for National Security (DANS) not to reveal details, saying disclosure could harm the investigation. DANS head Plamen Tonchev told lawmakers he believes the fire was sabotage and that more such attacks cannot be ruled out, dpa reported.

After the ruling, Mirchev wrote that Radev personally owes the public an explanation of what has been achieved, BTA reported.

Bulgaria’s case joins attacks Poland and Lithuania tie to Russia

Bulgaria has not said who might be behind the fire. Authorities in Poland and Lithuania have linked similar recent arsons on Starlink equipment to Russia.

In September, fire hit a Starlink ground station south of Warsaw, and Germany later detained two suspects. On 18 October, Lithuania’s prime minister said intruders had tried to burn a company’s Starlink antennas used by Ukraine, calling it part of Russia’s hybrid war. Moscow claims such accusations are baseless, Reuters reported.

The fire, which did not seriously damage the network, came after similar incidents in Bulgaria and Poland involving the satellite internet provider, a key defense tool for Ukraine’s armed forces.

© Inna Varenytsia/Reuters

Someone tried to set fire overnight to a Lithuanian company that stores Starlink communication equipment, but tipped-off guards foiled the attempt, Lithuanian Prime Minister Mindaugas Sinkevičius said. He linked the attack to Russia’s hybrid war against Europe. It is the third suspected sabotage of Starlink infrastructure in Europe in under a month.

Russia keeps attacking Ukraine at the front and from the air while running a sabotage campaign behind the lines in Europe, which ISW has linked into one pattern. Starlink keeps Ukraine’s drone units and front-line troops connected, and Poland pays for much of that service.

Fuel canisters and a control unit

The attack came just after midnight, the prime minister wrote. Security services had warned the company about possible attacks, security was stepped up, and the attempt failed.

The company provides connectivity through nine Starlink satellite antennas used by Ukraine, Sinkevičius told Lithuanian public radio LRT. At almost 2 a.m., intruders tried to burn the antennas and their control unit, leaving behind incendiary liquid in canisters of 3 to 10 liters.

“It is obvious that this is part of Russia’s hybrid war with elements of sabotage,” he said, adding that the client was likely “the Russian side.”

He said he believes the people involved, and how many there were, are known, but gave no details, citing the investigation.

Police Commissioner General Arūnas Paulauskas said no suspects had been detained, any damage was minimal, and the company kept working. A pretrial investigation is under way.

A drone the same morning

Hours later, an object that apparently entered from Poland crossed northern Lithuania, and NATO jets failed to identify it, Defense Minister Robertas Kaunas said. Possible fragments were found in the Pasvalys district near the Latvian border. Latvia’s military said the object may have blown itself up on a course toward Latvia.

Sinkevičius said the sabotage version had to be checked for the drone too. He called the National Security Commission for Monday, 19 October, to examine both incidents and consider giving services more powers to neutralize drones.

The third Starlink site

In September, a fire destroyed the distribution panel at a Starlink ground station in Wola Krobowska, Poland. Germany detained two Turkish nationals on 12 October, and Warsaw blamed Russian intelligence. In Bulgaria, masked intruders burned 11 of 17 Starlink antennas near Sofia.

Two tankers caught fire within about 12 hours off Sulina, Romania’s port at the mouth of the Danube, Romanian authorities reported. The crew of one said a drone hit it inside Romania’s territorial waters, while Bucharest says it is still checking whether drones were involved. Bulgaria, where drones sank ships in its economic zone this month, says it lacks proof that Russia launched them.

For months, Russia has struck civilian ships on the sea route that carries most of Ukraine’s farm exports, while its drones have repeatedly crossed into Moldova and Romania during attacks on Ukraine. As long as Bucharest and Sofia wait for drone wreckage before naming anyone, Russia, the party Bulgaria’s own prime minister says the logic points to, pays no price for extending its war on Ukraine’s trade routes into NATO members’ waters.

Seven sailors missing after the second fire

The San Marino-flagged chemical tanker Wine Trader reported a fire in its superstructure around 07:00 on 15 October while anchored in Romanian territorial waters about 13 nautical miles southeast of Sulina, Romania’s Naval Authority said. By midday, five of its 12 crew had been recovered and seven were still missing.

Hours earlier, at 01:34, a drone entered Romanian airspace over the country’s waters southeast of Sulina for about a minute before vanishing from radar, the Defense Ministry said. Authorities have not named a cause for the fire, though unnamed sources

Drones sank two merchant ships and set a third on fire in the Black Sea economic zones of NATO members Romania and Bulgaria on 5 and 6 October, killing at least two seafarers, Romanian and Bulgarian authorities reported. Ukraine blamed Russia for the first attack. Neither Bucharest nor Sofia has said who launched the drones.

Russia has spent months striking ships bound to and from Ukrainian ports while denying responsibility or staying silent. Now merchant vessels are sinking inside NATO members' economic zones without either government naming the attacker, so Moscow pays no political price for hitting allied waters.

Grain ship sinks off Romania

The Royad Mammadov, a Turkish-owned ship carrying grain from Ukraine's port of Izmail to Italy, sank on 5 October near Romania's Pescăruș offshore platform, 20 nautical miles from the Romanian coast, Digi24 reported. The Romanian Naval Authority described the incident as a fire on board. Romania's Interior Ministry said 11 crew members were rescued and two people died.

Three injured sailors aged 22 to 50 were taken to the Constanța county hospital, conscious and stable, with multiple injuries. Adrian Mihălcioiu, the leader of Romania's Free Seafarers' Union, said the ship was attacked by Russian sea and aerial drones in waters Romanians consider safe.

"It is a commercial ship, a ship that is not part of the war… people who have nothing to do with the war, it is not their war," he said.

Ukrainian President Volodymyr Zelenskyy blamed the attack on "two Russian drones" and said the ship was in neutral waters carrying corn. Citizens of Azerbaijan and India were on board, and the captain was killed, he said. Romanian authorities have not attributed the sinking to Russia.

Two more ships hit in Bulgaria's zone

A day later, drones struck two merchant ships in Bulgaria's exclusive economic zone east of the town of Byala, the first known attack on ships there, Maritime.bg reported. The Togo-flagged Alfa Watan, sailing from Al-Arish, Egypt, to Sulina, Romania, suffered critical hull damage and sank, Militarnyi said. The Bulgarian ferry Dioscuria found only an overturned lifeboat and life jackets at the scene, and the search for the crew continues, Euronews reported.

The Palau-flagged Able, sailing from Galați, Romania, to Istanbul, caught fire, and the Dioscuria rescued its 18 crew members. Both ships are Turkish-owned, Türkiye Today reported. Two sailors with severe injuries were flown to a hospital in Varna, Prime Minister Rumen Radev said, according to AP. Sea and aerial drones hit the ships at about 3 a.m., he said, calling the attack "a blatant violation of international law and maritime law."

Radev called an emergency meeting of four ministries, the presidency, and the security services. No one from the Alfa Watan has been found, he said, warning that if the war is not ended in time, it "will continue to expand its spatial scope." The origin of the drones is still being clarified, Maritime.bg said. Several Bulgarian media outlets cited sources as saying the drones were Russian, Sofia Globe reported.

Russia's war on Black Sea shipping

Russia had already killed the captain of a Tanzanian-flagged ship in September, and days later it struck another civilian vessel, killing its captain too. Ukraine says that route carries 90% of its farm exports.

Romania has destroyed a sea drone near its Neptun Deep gas project and found Russian drones floating in its economic zone. In September, ISW linked drone crashes in Romania and Moldova to a wider Russian pattern of pressure on NATO.

EU foreign policy chief Kaja Kallas called for a moratorium on Black Sea attacks. Turkish President Recep Tayyip Erdoğan said Ankara was stepping up diplomacy to restore grain exports. Türkiye and the UN are organizing new Black Sea truce talks between Russia and Ukraine, Bloomberg reported, citing a diplomat. Russia earlier dismissed Kyiv's offer of a Black Sea ceasefire.