NATO Eastern Flank developments — 18 October 2026
A week in which drone strikes on merchant shipping moved from Bulgaria's economic zone into Romania's waters, and two allies turned to NATO. Two tankers bound for Romania were struck on 14 and 15 October, one of them reported inside the territorial sea. Romania's foreign minister attributed the strikes to Russia, and Bulgaria said it could not prove who was responsible. Bulgaria asked NATO for air defence, counter-drone systems and patrol aircraft, and Romania proposed a joint Black Sea command. Both were requests and proposals: no allied measure had been decided by the end of the week. Over the same days Romania recorded uncrewed entries into its airspace on three days and, on 17 October, shot down two drones over its own waters. In Poland the government attributed September's arson at a Starlink ground station to Russian intelligence.
The developments
Drone strikes on merchant ships reached Romania's waters, and Bulgaria and Romania turned to NATO with requests and a proposal that no allied decision had answered by the end of the week
On 14 October the Comoros-flagged tanker Yara J, sailing from Turkey to Romania, was struck and caught fire off Sulina, reportedly inside Romanian territorial waters. On 15 October the San Marino-flagged chemical tanker Wine Trader, sailing from Tunisia to Romania, was hit by a drone south-east of Sulina, reportedly just outside the territorial sea; five crew were rescued and seven were missing. Romania's defence ministry stated on 17 October that several commercial ships had been hit by drones in the Black Sea in the previous week, including in Romania's territorial waters. Romania's acting foreign minister, Oana Țoiu, wrote that "Russia bears full responsibility". President Nicușor Dan said two drones had hit the vessels without saying whose they were. Bulgaria's prime minister, Rumen Radev, said the logic pointed to Russia but that "we cannot prove it". Reuters reported a NATO source as saying the drones were of Russian origin. On 14 October Romania's acting defence minister, Radu Miruță, proposed a joint military command of NATO's Black Sea riparian states. On 16 October Bulgaria's defence minister said Sofia had asked NATO for aircraft, air defence, counter-drone systems and air patrols; NATO ambassadors were reported to take the matter up the following week. Found late and dated to when it happened: on 5 October the grain ship Royad Mammadov sank after a fire in Romania's exclusive economic zone, with two dead and eleven rescued. Romanian authorities confirmed a fire and gave no cause; Ukraine's president said Russian drones hit it.
Why it matters. The strikes changed where the war at sea touches the alliance, not any arrangement for managing it. Inside the territorial sea a drone that hits a ship has crossed sovereign airspace, which is why the Yara J case matters more than its damage. Romania's ministry has not published that strike as an airspace entry, and its count of four entries for the week matches its airspace releases. Attribution stands at three different levels: one government's political statement, another's refusal to assert what it cannot prove, and an anonymous NATO source in wire reporting, which is not a NATO finding. What the week established is demand, not a measure: a request, a proposal and an agenda item. The regional mine countermeasures group, whose missions were extended to undersea infrastructure in July, addresses a different threat. The observable that would separate a change in allied posture from a change in rhetoric is a named NATO measure for the western Black Sea: an extension of Eastern Sentry, maritime patrol aircraft, or air defence deployed to Bulgaria.
- Informație de presă – UPDATE (Nr. 337)
- Drone strikes in the Black Sea raise fears of Russian escalation to test NATO's response
- Romania finally holds Russia responsible for the drone attacks on ships off its coast, and wants a joint NATO command for the Black Sea
- Bulgaria Asks NATO for Air Defense After Ship Attack
- Ukraine says Russian drone attack sinks ship in Romanian waters
Romania recorded uncrewed entries into its airspace on three days of the week and shot down two attack drones over its own territorial sea
Romania's defence ministry reported aerial targets inside national airspace off Sulina three times on 14 October: one in the morning, later destroyed by Ukrainian air defence; one from 17:38 to 17:46, about 22 km north-east of Sulina over territorial waters; and two from 20:04, one lost from radar over the sea and the other destroyed near Reni. At 01:34 on 15 October it detected a drone for about a minute over territorial waters south-east of Sulina. On the evening of 17 October two drones entered from the east and were shot down over Romanian territorial waters by two Romanian F-16s on air-policing duty, at 18:01 and 18:05. The ministry identified them as jet-powered attack drones of the Geran family. Its update said that in the previous week aerial targets had flown in Ukrainian airspace near the border in eight separate situations, and that in four of them uncrewed aircraft briefly entered Romanian airspace. Spanish F-18s on enhanced air policing also flew on 14 and 15 October.
Why it matters. This is recurrence in a state already affected, not spread: no new state, no Article 4 request and no change to NATO's air defence mission. Romanian fighters have shot down drones before, in July, so the response is not new in form either. Two things are worth holding. The ministry names the objects aerial targets until it identifies them, and this week it did so twice, once by type. And no release publishes the reported strike on a ship inside the territorial sea as an airspace entry. The week therefore shows an airspace picture and a shipping picture that the published record has not yet joined. What it does not establish is intent or origin beyond the type the ministry named.
Poland's government attributed September's arson at a Starlink ground station to Russian intelligence, and two suspects were arrested in Germany
On the evening of 23 September a fire was set at a Starlink satellite ground station operated by the state-owned Exatel at Wola Krobowska, about 40 km south of Warsaw. On 12 October Polish officials announced that two Turkish citizens suspected of setting it had been arrested in Germany. Tomasz Siemoniak, the minister overseeing Poland's special services, said: "We have no doubt that Russian intelligence services are behind this act of sabotage." Prime Minister Donald Tusk called it "another act of hybrid warfare".
Why it matters. The attribution came about three weeks after the act, among the fastest on the module's record, and the arrests show cross-border enforcement working. It stands at the level of a government's political statement. Reporting on the case describes charges for acting for a foreign intelligence service, which is a different and narrower claim than naming Russia, and no verdict exists. A satellite-communications ground station is a target class arson had not reached on this module's record. It establishes nothing about a wider campaign beyond what Poland has stated. The observable that would move it up the ladder is a published indictment naming the service, followed by a verdict.
Where this fits
This is one conflict's dated review for the week. The cross-conflict edition for the same week carries the most consequential findings from every conflict Vigil covers. The standing picture this review updates is the NATO Eastern Flank coverage. How Vigil grades, dates and sources its claims is set out in the methodology, and anything later found wrong is recorded in the corrections log.
By email Get Vigil’s Weekly Briefs and new Analytical Notes by email. What Vigil Dispatch sends
← Previous NATO Eastern Flank brief — 2026-10-11Every NATO Eastern Flank review All weekly briefs