Russian Drone and Missile Incursions into NATO Territory: The Running Record
A maintained ledger of Russian and Russia-attributed drone and missile incursions into NATO airspace since 2022, and how the alliance answered each one.
A maintained record of dated Russian and Russia-attributed drone and missile incursion into NATO airspace since 2022, and how national forces, NATO command and governments answered each one — updated as new incidents occur.
Why this page exists
Since Russia's full-scale invasion, wreckage and live munitions from its air war on Ukraine have repeatedly crossed into NATO territory — Poland, Romania, Estonia, Latvia, Lithuania, Germany, Denmark, Bulgaria, Sweden's waters. Each incident tests the same three things in sequence: whether it can be detected, whether it can be safely and legally engaged, and whether any government decides it is worth raising with the alliance as a whole. Taken together, they show how far detection, engagement rules and political response have each moved since 2022 — and where the gaps between them remain.
Through 2026 the authority to engage has moved from national capitals into NATO's own military chain faster than the political instrument for treating an incursion collectively — Article 4 consultation — has been used. This page tracks both curves side by side: what forces now do when a drone or missile crosses a border, and what governments have stopped asking the alliance to discuss when one does.
State of play
Romania's escalation ladder
Romania supplies the most complete national record. A Russian drone damaged property at Galați on 24–25 April 2026 after four minutes inside national airspace, prompting the summons of Ambassador Vladimir Lipaev; Defence Minister Radu Miruță announced the Merops counter-drone system would be operational "within days" the same week. Five weeks later, on 29 May, a Geran-2 struck a Galați apartment block, injuring two civilians. Romanian F-16s were airborne and cleared to fire but held, the track lasting only four minutes over populated ground.
The pattern reversed in late July. On 24 July a Romanian F-16 destroyed a Shahed-type drone over Buzău county on authority cleared through NATO's Combined Air Operations Centre at Torrejón, after two Italian Typhoons engaged and missed — 83 minutes from detection to kill, over empty ground. Two more shoot-downs followed on 25 and 26 July; a fourth target on 27 July crossed unengaged, with no reason given. Bucharest expelled a Russian diplomat and recalled its own ambassador the same day, citing prosecutors' forensic confirmation that recovered fragments were Russian.
The record since has run both ways. A Spanish F-18 on NATO air policing from Mihail Kogălniceanu shot down a drone north of Galați on 16 August, again cleared through Torrejón; on 20 August Romanian F-16s used cannon on an explosive-laden sea drone a few hundred metres from the Neptun Deep gas works, under Romanian rather than allied command. On 24 September a small drone flew four minutes over northern Romania and crashed near Solca. The interim defence minister said the conditions for a shoot-down, which must all be met at once, were not, and asked for a protest; the foreign ministry had issued none by evening.
Baltic Air Policing becomes an air-defence mission
For 22 years Baltic Air Policing was built for crewed violations — intercept, identify, escort — with engagement authority held above the cockpit and granted case by case. That changed by exception before it changed by mandate: a Romanian F-16 flying from Šiauliai downed a suspected Ukrainian drone over Estonia on 19 May 2026, and a French Rafale did the same over Latvia near Bērzgale on 8 June, with Latvia's defence minister confirming NATO command took the decision.
At the Ankara summit on 7–8 July 2026 the mandate itself changed: allies converted Baltic Air Policing into an air defence mission, vesting engagement authority in the Supreme Allied Commander Europe and delegating it through the Combined Air Operations Centre at Uedem to the aircraft. Estonia's defence minister described the practical effect as removing "restrictions preventing the pilot from pressing the button." An Italian Eurofighter took the mission's third kill overall, and its first under the new mandate, over Latvia's Balvi region on 14 August, after Russian electronic warfare pushed a drone off course. The same Italian rotation took the fourth on 15 September, destroying an armed drone that had crossed from Belarus and spent about thirty minutes over Lithuania; President Nausėda called it a Russian Gerbera diverted by Ukrainian jamming, while his defence ministry waits on engine analysis.
The interior: airports, hinterland, and legal seams
Pressure has not stayed at the frontier. Between 22 and 28 September 2025 drones disrupted Danish airports and air bases around the Copenhagen EU summit, drawing an RAF counter-UAS detachment; on 3 October 2025 drones forced a temporary shutdown of Munich Airport. In February 2026 a Swedish naval vessel jammed a suspected Russian reconnaissance drone in the Øresund Strait 13 kilometres from the French carrier Charles de Gaulle, moored at Malmö.
Germany's turn came on the night of 4–5 August 2026, when an airport worker found a drone carrying an explosive device on the cargo apron at Leipzig/Halle, a NATO heavy-airlift and Ukrainian Antonov hub; the Federal Prosecutor General took the case on 6 August, alleging attempted causing of an explosion. Attribution took four weeks: on 1 September the interior and foreign ministers said low-level operatives had acted for Russian state entities, naming no service or suspect, and Berlin ordered Russia's consulate-general in Bonn closed. No alliance instrument followed. The airports' association ADV confirmed in August that the detection and defence systems the federal government promised had not arrived; "we are simply blind in the lower airspace," said Gerald Wissel, chairman of the drone association UAV DACH.
The political cost and the Article 4 gap
Incursions have already cost one government its defence minister: after a Ukrainian-origin drone, redirected by Russian jamming, struck Latvia's Rēzekne oil depot on 7 May 2026, Prime Minister Evika Siliņa forced Andris Sprūds' resignation on 10 May, installing Colonel Raivis Melnis, a serving officer, in a portfolio previously held by civilians. Poland has kept its response national: after a Russian Kh-101 came down 100 kilometres inside the country near Tarnawa-Kolonia on 30 July 2026, Warsaw summoned Russia's ambassador and dated the missile's manufacture to within four months of impact, but did not invoke Article 4 — the instrument it invoked on 10 September 2025 after the mass drone incursion, nine days before Estonia did the same over a MiG-31 violation.
That restraint is now the pattern across capitals. NATO's North Atlantic Council said on 12 August that the flank violations show Russia's "increasing tolerance for risk", harder than its September 2025 warning of miscalculation, but no ally has requested consultations since. Germany's attribution of the Leipzig drone on 1 September, the armed drone shot down over Lithuania on 15 September and a Russian helicopter's 42 seconds in Polish airspace on 23 September each stayed national: Berlin closed a consulate, Vilnius is waiting on an engine analysis, and Poland's foreign minister said an admission of error would suffice. The one new proposal came from Brussels rather than NATO: on 16 September the Commission president offered an EU "Article 4" of its own, with no legal base or date.
Key numbers
| Metric | Value | As of | Source |
|---|---|---|---|
| Drone violations of Romanian airspace in 2026 | at least 23 (against 18 across 2022–2025) | 21 Aug 2026 | Romanian Ministry of National Defence figures reported by ABC News, 21 August 2026; interim Defence Minister Radu Miruță said on 24 September, after the Solca crash, that drone entries this year are triple last year's; an earlier Spanish Estado Mayor de la Defensa count gave 33 since 2022, 18 of them in 2026, as of 29 July |
| Drone incursions over European airports and military sites since Aug. 2024 | 144, "dozens" assessed Russia-likely | 5 Aug 2026 | IISS study, as reported by the Financial Times, August 2026 |
| Baltic Air Policing kinetic engagements of foreign drones | 4, all since May 2026, in 22 years of the mission | 15 Sep 2026 | Estonia (19 May), Latvia/Bērzgale (8 June), Latvia/Balvi (14 August — identified on 20 August as Ukrainian, diverted by Russian jamming), Lithuania/Kaišiadorys (15 September — armed; President Nausėda: Gerbera type, 'most likely' Russian, origin not confirmed by the defence ministry); two under the July Ankara mandate, both by the Italian rotation; one scramble over Estonia on 1 September without an engagement |
| Romanian shoot-downs over four consecutive days | 3 of 4 targets engaged | 27 Jul 2026 | Romanian Ministry of National Defence, 24–27 July 2026 |
| Time since any ally last requested Article 4 consultations | Unused since 19 Sept. 2025 (Estonia; Poland's request came 10 Sept.) | 26 Sep 2026 | No request after Germany's 1 September attribution of the Leipzig drone to Russia, the 15 September Kaišiadorys shoot-down, the 23 September Mi-8 violation of Polish airspace or the 24 September Solca crash in Romania; von der Leyen proposed a separate EU 'Article 4' protocol on 16 September, undated. NATO / North Atlantic Council statement of 12 August 2026; Estonian government decision of 19 September 2025 |
| Production-to-impact interval on the Kh-101 recovered near Tarnawa-Kolonia | under 4 months | 31 Jul 2026 | Polish Ministry of National Defence, deputy minister Cezary Tomczyk |
| Merops interceptor unit cost / share of Shahed-type kills credited in Ukraine | ~$15,000 per round / ~40% | 24 Apr 2026 | NATO Allied Command Transformation, Eastern Phoenix exercise, Capu Midia |
| Confirmed breach count at the Galați apartment-block strike | 28th confirmed breach of Romanian airspace since 2022 | 29 May 2026 | Romanian Ministry of National Defence |
The ledger
Newest first, one dated development per entry; where a Großwald piece covers it, the entry links to it.
A small drone enters Romania through northern Botoșani county, flies about four minutes in national airspace and crashes near Solca in Suceava county without casualties or damage; two F-16s launch from Borcea and RO-Alert warnings go to Botoșani and Suceava. Interim Defence Minister Radu Miruță says the conditions for a shoot-down were not met simultaneously, that eight fighters were scrambled overnight and that drone entries this year are triple last year's, and asks for a protest against Russia; the foreign ministry has issued none by evening.
Four German Eurofighters of Tactical Air Wing 74 begin a roughly week-long deployment to Lielvārde under NATO's enhanced Air Policing North, controlled from Uedem, covering Latvia's 3 October election; Berlin announced the move on 16 September, saying Riga asked for it after "repeated airspace violations with UAVs/drones over the Baltic countries". Italian and Turkish aircraft are due to follow.
A Russian Mi-8 helicopter from the Kaliningrad region crosses into Poland north of Braniewo at 11:08, about 300 metres deep for 42 seconds, per Operational Command; fighters are scrambled and ground-based air defence stands by. Foreign Minister Radosław Sikorski says an admission of pilot error would settle it and that whether to fire is for the military; no Polish note or summons is announced. Czech Gripens fly their second combat patrol over Poland overnight, after one on 18 September, without using force.
At the Dorohusk crossing, Defence Minister Władysław Kosiniak-Kamysz and Interior Minister Marcin Kierwiński say six crossings in the Lublin and Subcarpathian voivodeships now have air-defence positions and daily air cover, and Patriot batteries are positioned in the Lublin and Masovian voivodeships; Dorohusk has 650 shelter places. The measures follow the 13 September strikes at Yahodyn.
Poland scrambles fighters at midday for a single fast object — provisionally a jet-powered drone, "or some kind of missile" per Operational Command — that comes down about four kilometres inside Ukraine near Yahodyn, opposite Dorohusk; no violation of Polish airspace. Deputy Defence Minister Cezary Tomczyk says the operational commander issued a pre-authorised order to shoot had the border been crossed; Lublin and Rzeszów airports suspend operations. Prime Minister Donald Tusk tells the Sejm the intelligence services assess that Russia plans "accidental" drone and missile strikes on states supporting Ukraine, Poland included; he names no service.
President Gitanas Nausėda says after Lithuania's State Defence Council that the Kaišiadorys drone was a Gerbera type, "most likely" a Russian drone intended for Ukraine and diverted by Ukrainian electronic warfare, and that relying on fighter jets is "not an efficient solution"; Defence Minister Robertas Kaunas declines to name an origin before the engine analysis. The same day Poland's military prosecutor in Poznań identifies the drone recovered from the Baltic off Rusinowo on 14 September as a Russian-made Gerbera 2 with a fragmentation-blast warhead and fuze; Poland's Operational Command records no airspace violation since 31 July.
In the State of the Union address in Strasbourg, Commission President Ursula von der Leyen proposes "Europe's own Article 4 – or an Emergency Security Protocol" — one member state triggers, all convene — citing Denmark, Lithuania, Poland and the Leipzig drone; no legal base, figure or date is attached.
Italian Eurofighters flying Baltic Air Policing from Šiauliai destroy a drone that crossed into Lithuania from Belarus shortly after midnight and spent about thirty minutes in Lithuanian airspace; the wreckage falls near Pratkūnai in Kaišiadorys district, a few kilometres from the Kruonis pumped-storage plant, and the defence minister confirms an explosive device. Vilnius airport halts flights; the military declines to name an origin before its investigation — the mission's fourth kill since May and its second under the Ankara mandate.
Russian drones strike a Kyiv–Warsaw locomotive at Yahodyn station, two kilometres from the Dorohusk crossing, and a truck at a filling station under a kilometre from Poland; Defence Minister Władysław Kosiniak-Kamysz counts a dozen or more jet-powered Geran-5 drones, two falling one and five kilometres from the border, with Polish F-16s, helicopters and a Saab reconnaissance aircraft airborne and no violation of Polish airspace.
Romania's defence ministry reports drone remains at four sites on and off the Black Sea coast in one day — Câșla Vădanei and Periteașca in Tulcea County, Edighiol-Periboina in Constanța County, and two fragments recovered 46 nautical miles east of Midia; one Periteașca fragment and an interceptor drone at Edighiol-Periboina carried explosives and were neutralised. Two F-16s had been scrambled at about 04:15 for a group of targets north of Vylkove; the ministry records no entry into national airspace and names no origin.
Germany attributes the Leipzig/Halle drone to Russia: Interior Minister Alexander Dobrindt and Foreign Minister Johann Wadephul say low-level operatives acted on behalf of Russian state entities, naming no service, suspect or arrest; Berlin orders Russia's consulate-general in Bonn closed by 18 September. "We are not at war," Dobrindt says; no Article 4 request follows.
During a Ukrainian attack on Ust-Luga, Estonia tracks roughly ten drones near its border; one crosses into south-eastern Estonia and stays near the border. Ground-based air defence units are activated and Turkish F-16s scramble from Ämari without firing, per air force commander Brigadier General Riivo Valge; no criteria for holding fire are published. The same day a damaged drone carrying explosives is found in a field at Viișoara, Vaslui County, 30 kilometres from Romania's Moldovan border, and destroyed in a controlled detonation, origin undetermined.
Interior ministers of ten Baltic Sea and partner states meet at the Mürwik naval academy in Flensburg under Alexander Dobrindt and agree a security task force at state-secretary level to coordinate responses to hybrid attacks, with drone defence at airports and ports the focus; no NATO or EU instrument is attached, and a further ministerial on the shadow fleet is announced without a date.
Romanian F-16s destroy an explosive-laden sea drone reported drifting a few hundred metres from the Neptun Deep gas works in Romania's exclusive economic zone, about 80 nautical miles east of Constanța, with cannon fire after a defence-ministry command cell requested that NATO-level command be assumed by the Romanian Armed Forces; Defence Minister Radu Miruță says Kyiv, contacted through an established channel, confirmed the device was not Ukrainian, and President Nicușor Dan names Russia. A maritime rather than airspace incursion; the response ran national, despite the July extension of the Romanian–Bulgarian–Turkish task force to infrastructure protection.
Hours earlier, during the same night's barrage on Kyiv, an aerial drone enters Romanian airspace about 13 km east of Galați — radar picks up a group of aerial assets near the Ukrainian border at 02:23 — and crashes and burns four kilometres north-east of Grindu, Tulcea County, at 03:24 in an uninhabited area; two Spanish F-18s and an IAR-330 helicopter are scrambled to track it, no engagement, no casualties.
Latvia's armed forces identify the drone an Italian Eurofighter shot down over Balvi on 14 August as Ukrainian: it entered from Belarus, most likely diverted by Russian electronic-warfare interference during Ukrainian attacks on Russian ports that night — attribution arriving six days after an engagement taken under the delegated NATO chain, which did not depend on origin.
A Spanish F-18 on NATO air policing from Mihail Kogălniceanu shoots down a drone that entered Romanian airspace from the Moldovan side about 24 km north of Galați (detected 04:44, engaged 05:01, probable impact between Baleni and Cudalbi in Galați county); the Romanian defence ministry says clearance ran through NATO's Combined Air Operations Centre at Torrejón — Romania's fourth shoot-down of the year, per the ministry.
An Italian Eurofighter on Baltic Air Policing shoots down a drone over Latvia's Balvi region (Rugāji parish) after Russian electronic warfare pushes it off course — the mission's third kill since May.
NATO's North Atlantic Council calls the Polish and Romanian violations evidence of Russia's "increasing tolerance for risk"; no ally invokes Article 4. Separately, security staff log six overnight drone flights over the Bundeswehr's Mechernich facility that services Patriot batteries, and Inspector General Carsten Breuer cites three large drones over Belgium's Kleine-Brogel, which stores B61 weapons.
A drone crosses from Romanian into Bulgarian airspace undetected by either country's surveillance and explodes near the Kardam border crossing, roughly a kilometre from a Trans-Balkan gas pipeline compressor station; Sofia's preliminary reading is a stray Ukrainian Maya decoy, not deliberate.
Germany's Federal Prosecutor General takes over the Leipzig/Halle drone investigation, alleging attempted causing of an explosion; a police document and the interior ministry give conflicting accounts of whether an adjacent Ukrainian Antonov carried military ammunition.
An airport bus driver finds a drone carrying an explosive device on the cargo apron at Leipzig/Halle airport, a NATO heavy-airlift and Ukrainian Antonov hub; flight operations halt for close to two hours and almost 20 DHL freighters are diverted.
Poland dates the Kh-101 recovered near Tarnawa-Kolonia to second-quarter 2026 production near Moscow; the foreign ministry summons Russia's ambassador and hands over a protest note. Article 4 remains unused.
A Russian Kh-101 cruise missile comes down roughly 100 kilometres inside Poland near Tarnawa-Kolonia; a Polish F-16 tracks it but does not fire; military command says it stood ready to shoot had the missile continued flying.
Romania expels a Russian diplomat and recalls its ambassador from Moscow after four drone incursions in four days; the fourth target crosses Romanian airspace toward Ukraine unengaged, with no reason given.
A third Romanian F-16 shoot-down in three days, over Romanian territorial waters near Sulina.
A second Romanian drone shoot-down near Sfântu Gheorghe, the day after the Buzău engagement.
A Romanian F-16 destroys a Shahed-type drone over Buzău county on authority cleared through NATO's Combined Air Operations Centre at Torrejón, after two Italian Typhoons engage and miss — 83 minutes from detection to kill, over uninhabited ground.
NATO's Ankara summit converts Baltic Air Policing into an "air defence mission," vesting engagement authority in SACEUR and delegating it through the Combined Air Operations Centre at Uedem to the cockpit; Estonia's Ämari base is redesignated a NATO operational air base.
A French Rafale on Baltic Air Policing shoots down a drone that crossed into Latvian airspace near Bērzgale; Latvia's defence minister says the engagement decision was taken by NATO command.
A Russian Geran-2 drone strikes an apartment block in Galați, injuring two civilians; Romanian F-16s were airborne and cleared to fire but the four-minute, low-altitude track over populated ground precluded engagement.
A Romanian F-16 flying Baltic Air Policing from Šiauliai destroys a Ukrainian drone diverted by Russian electronic warfare over southern Estonia.
Latvian Prime Minister Evika Siliņa forces Defence Minister Andris Sprūds' resignation over the government's response to the Rēzekne strike; Army Colonel Raivis Melnis, a serving officer, is appointed to a portfolio previously held by civilians.
Two drones diverted by Russian electronic warfare enter Latvian airspace; one strikes the Rēzekne oil-storage depot, damaging four tanks. Military drone detection fails and public warnings are delayed roughly an hour.
A Russian drone damages property at Galați after four minutes inside national airspace; roughly 200 residents are evacuated and Russia's ambassador is summoned.
Romania tests the Merops counter-drone system at Capu Midia; Defence Minister Radu Miruță declares it operational "within days," covering the Danube corridor.
Drones strike NATO territory in Estonia (the Auvere power station) and Latvia (the Kraslava region) on the same day, during a Russian barrage of over 550 drones and missiles against Ukraine; neither is intercepted.
A Swedish naval vessel jams a suspected Russian reconnaissance drone in the Øresund Strait roughly 13 kilometres from the French carrier Charles de Gaulle, moored at Malmö.
NATO launches Arctic Sentry, led from Joint Force Command Norfolk, extending the enhanced-vigilance-activity template built for Baltic and Eastern Sentry to the High North.
Drones force a temporary shutdown of Munich Airport, with sightings also reported near the Erding military site, days after multiple drones were seen over critical infrastructure in Schleswig-Holstein.
A wave of drone disruptions hits Danish airports and air bases — Copenhagen, Billund, Aalborg, Esbjerg, Sønderborg, Skrydstrup, Karup — through 28 September, around the Copenhagen EU leaders' summit; Denmark requests an RAF counter-UAS detachment.
Three Russian MiG-31 fighters spend roughly 12 minutes in Estonian airspace; Estonia requests Article 4 consultations.
NATO launches Eastern Sentry, an open-ended enhanced vigilance activity along the entire eastern flank.
At least 19 Russian drones cross into Polish airspace overnight during a strike wave against Ukraine; several are shot down. Poland requests Article 4 consultations; Estonia follows on 19 September, and no ally has requested consultations since.
NATO launches Baltic Sentry after the severing of the Estlink 2 power cable, setting the enhanced-vigilance-activity template later applied to Eastern and Arctic Sentry.
A missile kills two people at Przewodów, Poland; a Polish investigation later concludes it was a Ukrainian air-defence round rather than a deliberate Russian strike — the precedent Warsaw has invoked in 2026 for insisting on attribution before declaring intent.
The contrarian read
Reading these incidents as one coordinated Russian testing campaign overstates what the record shows. Each government's restraint has its own defensible, contemporaneous logic: Poland's insistence on forensic certainty before drawing conclusions rests directly on Przewodów, where a rushed attribution would have been wrong; Romania's non-engagements were track-length and public-safety judgments made by named officers in real time; Bulgaria's preliminary reading of the Kardam drone as a stray Ukrainian decoy, not a deliberate act, is the affected state's own assessment and may simply be correct; and Germany classified Leipzig as a prosecutor's case within two days and attributed it only four weeks later, answering with a consulate closure rather than an alliance request. Much of the drone traffic reaching the Baltic states is also electronic-warfare spillover, and it runs both ways: Ukrainian drones pushed off course by Russian jamming over Estonia and Latvia and, by Lithuania's president's account, a Russian Gerbera pushed off course by Ukrainian jamming over Lithuania. The affected governments confirmed that mechanism; nobody merely asserted it. Four capitals reaching similar restrained conclusions in the same weeks may be four independent, individually sound judgments rather than a single alliance-wide pattern of accommodation; treating consistency as proof of intent is an inference the record does not support.
What to watch
The next Article 4 request
No ally has asked for consultations since Poland (10 September) and Estonia (19 September) did in 2025 — a year on, the gap has held through Germany's 1 September attribution of the Leipzig drone to Russia, the 15 September shoot-down of an armed drone over Lithuania and a Russian Mi-8's 42 seconds in Polish airspace on 23 September, after which Poland's foreign minister said an admission of error would suffice. Prime Minister Tusk told the Sejm on 17 September that intelligence services assess Russia plans "accidental" strikes on states supporting Ukraine, and Poland has pre-authorised its pilots to fire on a border crossing. A drone or missile engaged over Polish territory under that order, with or without a request afterwards, is the cleanest test of whether national-only responses are policy or coincidence; the Commission's proposed EU protocol offers a second venue if it acquires a legal base.
A ground-based interceptor credited with a kill
Every drone downed over or off NATO territory in 2026 has been taken by a crewed fighter, the 15 September Kaišiadorys engagement included — no engagement was reported by the NASAMS batteries Lithuania moved onto Vilnius's approaches in August, Estonia activated ground units on 1 September without firing, and Merops has been integrated in Romania since June without a credited engagement. President Nausėda said on 16 September that fighters are "not an efficient solution" and that Lithuania needs detection and other effectors. The markers are a Lithuanian procurement or deployment decision following that statement, and whether any engagement credits the cheaper layer before Spain's counter-drone helicopter rotation in Romania ends around December 2026.
The Lublin forensic report
Poland has not published the plant identification or production-date evidence behind its Kh-101 dating, and has not said whether the finding came from Polish forensics alone or with partner-intelligence input. Two months on, the minister's statement remains the only public basis for the dating; publication would show whether it rests on Polish forensics or on an allied finding.
A named suspect in the Leipzig case
Berlin supplied the state attribution on 1 September — Russia and "state entities", no service named — and the federal prosecutor has named no suspect and announced no warrant. On 18 September the prosecutor's office said it is examining whether custom-built drone parts found near the Wunstorf air base, home of the Luftwaffe's A400M fleet, are connected to Leipzig; that inquiry sits with Lower Saxony's criminal police. A warrant, an arrest or a federal takeover of Wunstorf is the next fact, measured against the two years the 2024 parcel plot took to reach trial in Vilnius.
Neptun Deep and the trilateral task force
Romania, Bulgaria and Turkey agreed in July to extend their Black Sea mine-clearing task force to protecting critical infrastructure, yet the 20 August sea-drone engagement off the platform ran under Romanian command, after a defence-ministry cell asked that NATO-level command be assumed by the Romanian Armed Forces. The test is whether the task force takes up station around Neptun Deep before first gas in 2027, or platform protection stays a national arrangement.
The Flensburg task force
Ten interior ministries agreed at Flensburg on 28 August to form a security task force at state-secretary level for hybrid attacks, and Germany announced a follow-on ministerial on the shadow fleet. Neither has a published date, mandate or membership list. A first convening after a named incident, or a link to NATO or EU instruments, would show whether it is a coordination mechanism or a communiqué.
The Kaišiadorys wreckage and the Rusinowo link
Lithuania's president has called the 15 September drone a Russian Gerbera diverted by Ukrainian jamming; its defence ministry is waiting on engine analysis. Poland's defence minister has said the armed Gerbera 2 recovered off Rusinowo may have transited Lithuanian airspace from Kaliningrad, and the two countries have agreed to exchange findings. A published engine identification, a joint Polish–Lithuanian finding, or any Belarusian or Russian statement would settle whether the record holds one armed Gerbera or two.
A Romanian note over Solca
Romania's foreign ministry summoned the Russian ambassador after Galați in April and expelled a diplomat after the four July incursions. After the 24 September Solca crash the interim defence minister asked publicly for a protest and left it to the foreign ministry and presidency. A note or summons, and what the fragments show about the "newer characteristics" he described, will show whether the diplomatic step still follows a crash on Romanian soil.
Related Großwald positions
Scope: dated Russian or Russia-attributed drone and missile incursions into NATO airspace since 2022 and the response to each — national forces, NATO command, governments. Crewed-aircraft airspace violations and Moldovan incidents are noted where relevant but tracked elsewhere. Each entry is sourced to the defence ministry or command that reported it; attribution is recorded as stated by that authority.
External sources named in text: Reuters; NATO; Romanian Ministry of National Defence; Romanian Ministry of Foreign Affairs; Polish Ministry of Foreign Affairs; Estonian Ministry of Defence; Latvian Ministry of Defence; Generalbundesanwalt (Germany); Bundespolizei / Saxony state criminal police; IISS; Financial Times; ERR / LRT / BNS; Försvarsmakten (Sweden); Al Jazeera; ABC News.