Escalation watch › Hybrid & sabotage › H02

Black Sea coast (Romania, Bulgaria): drones, mines or sabotage near military and energy sites

H02 · Both · checked 2026-11-09 · reviewed Every run · priority

3 Activation — baseline 2, now 3 of 3

Figures from the maritime risk firm AMBREY, carried in Turkish reporting, put 317 COMMERCIAL AND OTHER VESSELS affected by attacks in the Black Sea and Sea of Azov between MAY AND OCTOBER 2026. The breakdown for the third quarter is the part this tracker has…

Escalation signal: Deliberate strikes, sabotage, mines or repeated drone incidents at coastal and offshore sites. Romania: Mihail Kogălniceanu air base (NATO), Constanța port, Midia/Petromidia refinery, Neptun Deep and other offshore gas platforms, Cernavodă nuclear plant, Danube delta ports. Bulgaria: Varna naval base and port, Burgas port and refinery. Escalation = casualties, confirmed deliberate targeting, offshore attacks, or closure of shipping lanes. Stray drones crossing borders belong in U02; log here only incidents at these sites or at sea.
Baseline (21 Sep 2026): Attacks on commercial shipping in and around NATO members' Black Sea waters are now recurrent and lethal. Romania reports 33 airspace violations since 2022, 18 in 2026, with four shoot-downs this year; drones have struck near the Neptun Deep gas platform and, in Bulgaria, within a kilometre of a Trans-Balkan pipeline compressor station. Since October 2026 the maritime dimension dominates: merchant vessels have been struck inside Bulgaria's exclusive economic zone in two separate waves, with a sinking, deaths and missing crew. The maritime risk group Ambrey counts at least 45 merchant vessels attacked across the Black Sea in the past twelve months in areas not previously listed as high risk. Attribution is contested: Ukraine's foreign ministry blames Russia, Bulgaria initially called the circumstances unclear, and no party has claimed the strikes.
Where to check: G4Media Ziua de Constanța HotNews.ro Mediapool VSquare MarineTraffic ADS-B Exchange Copernicus Browser (Sentinel-2)Rybar (Telegram)

Check log

2026-11-083THE CAMPAIGN IS TWO-SIDED, AND IN THE THIRD QUARTER UKRAINE ATTACKED MORE SHIPS THAN RUSSIA. Figures from the maritime risk firm AMBREY, carried in Turkish reporting, put 317 COMMERCIAL AND OTHER VESSELS affected by attacks in the Black Sea and Sea of Azov between MAY AND OCTOBER 2026. The breakdown for the third quarter is the part this tracker has been missing: UKRAINE CONDUCTED 137 ATTACKS ON SHIPPING, RUSSIA 92. Attacks on commercial vessels have quadrupled in six months, and in October at least nine cargo ships and tankers were attacked, damaged or sunk in the WESTERN Black Sea, the stretch closest to Romanian and Bulgarian waters. A CNN analysis separately counts at least 12 commercial ships struck by Russian drones recently with more than 30 seafarers dead or missing. WHY THIS MATTERS FOR EVERYTHING ELSE IN THIS INDICATOR: the entries here have tracked a campaign against shipping in NATO members' waters whose authorship neither Sofia nor Bucharest will name. The Ambrey figures show that across the basin as a whole the larger number of attacks in that quarter were Ukrainian, aimed at vessels serving Russian trade - which is a sufficient reason for two governments to be cautious about attribution quite apart from any political reluctance, and a reason for this tracker to stop treating 'unattributed' as a euphemism. A TURKISH CASE ILLUSTRATES IT: the Turkish-flagged MV REYHAN SARI was hit by a drone off Novorossiysk while carrying COAL FROM RUSSIA TO TRABZON, killing Savas Cakar, whose brother, the journalist Abbas Cakar, is calling for an independent investigation and prosecution under international law. A ship carrying Russian cargo, struck near a Russian port, is not plausibly a Russian target. MEANWHILE RUSSIA CLAIMS ITS OWN STRIKES OPENLY: the defence ministry said on 8 November it had hit a container ship south-west of Odesa said to be carrying weapons and military equipment, after a similar claim on 7 November east of Odesa, and stated that strikes on vessels carrying military cargo will continue. Erdogan on 1 November: attacks on civilian ships 'cannot be accepted', and Foreign Minister Fidan has put a proposal to both Russia and Ukraine to end them. Score remains 3. Sources: Ambrey via Sharq al-Awsat Turkish service and ekonomipolitikasi, CNN analysis via the same, Russian defence ministry via dogruhaber and aydinlik, Erdogan via Euronews Turkish, Yeni Ankara on the Reyhan Sari.
2026-11-033NATO STRENGTHENS BLACK SEA PATROLS. Russian coverage reports the alliance has decided to increase patrolling of the Black Sea, following the reinforcement agreed after the 20 October North Atlantic Council session - maritime patrol aircraft, radars and drones rather than warships, since Montreux and the absence of rotational allied naval deployments since 2022 limit the options. This lands in the same week Bulgaria elected a president proposing a six-nation moratorium including Russia, and days after Erdogan offered to broker a navigation-safety agreement with Moscow: the alliance is reinforcing surveillance while two of its three littoral members pursue arrangements that include the state most reporting holds responsible. No attribution has been made by Sofia or Bucharest, and no Article 4 consultation has been requested. Score remains 3. Sources: Vzglyad citing NATO, earlier Defense Post reporting on the Council decision.
2026-11-013BULGARIA ELECTS THE CANDIDATE WHO WILL NOT NAME RUSSIA. Iliana Iotova won the runoff, with exit polls from Trend giving her 52.5% to Andrey Gyurov's 43.4% and Alfa Research and Market Links projecting the same outcome; Gyurov conceded on the first figures. Turnout was about 26% at 19:00, in line with the record-low 22.98% of the first round. She becomes Bulgaria's first elected female president. ONE RESULT CUTS AGAINST THE PICTURE: Bulgarians voting ABROAD backed Gyurov heavily, 45.7% to 22.7%, as they had in the first round - the diaspora split from the domestic electorate on exactly the geopolitical question. WHAT IT MEANS FOR THIS INDICATOR, DIRECTLY: the state in whose exclusive economic zone merchant ships have been sunk with 21 people missing has elected a president who favours dialogue with Moscow and the lifting of sanctions, opposes military aid to Ukraine, and has proposed a SECURITY MEETING OF ALL SIX BLACK SEA STATES - Russia included - TO SIGN A MORATORIUM ON HOSTILITIES. She is backed by Prime Minister Radev, whose position is that a ceasefire in Ukraine is the only sure way to stop the attacks on shipping. Sofia has declined both to attribute the attacks and to invoke Article 4, and the election makes a change in either less likely. The presidency is largely ceremonial but commands the armed forces and sets foreign-policy tone. Her proposal now has a mandate behind it, and it converges with Erdogan's navigation-safety initiative - two Black Sea NATO members pursuing an arrangement that includes Russia, rather than an alliance response against it. Score remains 3. WATCH: whether Sofia tables the six-nation moratorium formally, and whether Romania joins or resists it. Sources: bTV citing Alfa Research and Market Links, Trend exit poll via town.bg, novini247 on the diaspora split, Reuters.
2026-11-013BULGARIA VOTES, AND BOTH CANDIDATES HAVE PROPOSALS FOR THE ATTACKS. AFP puts the toll from the October strikes on commercial vessels off Bulgaria at 21 PEOPLE MISSING. Turnout in the first round was 23%, a record low; Iotova led Gyurov 35% to 32%, a 2.8-point margin against the 20-point lead polls had predicted. THE TWO POSITIONS, WHICH DIFFER ON EXACTLY WHAT THIS INDICATOR TRACKS: Iotova, running as an independent and backed by Radev's Progressive Bulgaria, presents herself as a 'president of peace', favours dialogue with Moscow and the lifting of sanctions, OPPOSES MILITARY AID TO UKRAINE, and has proposed A SECURITY MEETING OF ALL SIX BLACK SEA STATES TO SIGN A MORATORIUM ON HOSTILITIES - a proposal that would include Russia and that parallels Erdogan's navigation-safety initiative. Gyurov, a former caretaker prime minister backed by pro-Western parties, signed a security agreement with Kyiv during his premiership and criticised Iotova in the televised debate for failing to blame Russia directly for the attacks; he wants Bulgaria to be a reliable NATO ally. Radev's argument for Iotova is that 'a ceasefire in Ukraine and peace negotiations are the only sure guarantee of stopping attacks against commercial ships in the Black Sea'. Yotova would be Bulgaria's first elected female president. Score remains 3; no result yet. Sources: AFP via France 24, AP via Washington Post and NBC, Bytes Europe.
2026-10-313ANKARA OFFERS TO BROKER A BLACK SEA NAVIGATION AGREEMENT - AND SAYS IT WILL TAKE IT TO MOSCOW. After meeting Zelensky in Istanbul, Erdogan said the two had examined peace efforts and the Black Sea security situation in detail, that Turkey has worked actively since the war began to safeguard security and stability in the Black Sea, and - the operative part - that they exchanged views on RESTORING THE SAFETY OF NAVIGATION. He said Turkey will continue talks with the parties to re-establish navigation safety, that an agreement would accelerate efforts toward a durable peace in Ukraine, and that Ankara aims to advance the process BY DISCUSSING IT WITH RUSSIA AS WELL. WHY THIS MATTERS: Turkey is the only alliance member that controls the straits, has declined to sanction Russia, and retains working channels with Moscow - the same combination that produced the 2022 grain corridor, also negotiated in Istanbul. A navigation-safety arrangement is a narrower and more achievable object than a ceasefire, and the Oleshky precedent this week suggests narrow, specific agreements are what both belligerents can currently execute. It is also the first serious alternative on the table to the military responses logged in this indicator - escorts, counter-drone deployments, a trilateral command - none of which addresses the merchant ships actually being hit. Nothing is agreed. Score remains 3. WATCH: whether Ankara opens the subject with Moscow, and whether Romania and Bulgaria join a Turkish-led track rather than a NATO one. Sources: Erdogan's post-meeting statement via Hibya and Turkish press, Turkish presidency communications directorate.
2026-10-283THE ATTACKS RESUME, AND THIS TIME BY SEA DRONE. Three unidentified unmanned surface vehicles - possibly Russian, per ISW's assessment - struck a cargo ship off Bulgaria's coast on 28 October, ending roughly a fortnight without a reported attack in these waters. The shift of method matters: previous strikes in Bulgarian and Romanian waters were attributed to aerial drones, while USVs are the weapon both belligerents have used against shipping in the eastern Black Sea, which widens rather than narrows the attribution question. No party has claimed it, and neither Sofia nor Bucharest has attributed it. CONTEXT FOR TIMING: it falls three days before Bulgaria's presidential runoff, in a campaign fought substantially over these attacks and framed by the prime minister as a choice between accommodation with Moscow and alignment with Kyiv. Whether that timing is coincidence is not establishable. Score remains 3 - the maximum - and the quiet period that had begun is over. Sources: ISW assessment of 28 October citing Ukrainian and regional reporting.
2026-10-263BULGARIA'S RUNOFF IS SET FOR 1 NOVEMBER, AND THE PRIME MINISTER HAS FRAMED IT AS A CHOICE BETWEEN 'PEACE AND WAR'. Official results with 99.94% of ballots processed: acting President Iliana Yotova 34.8%, former caretaker prime minister Andrey Gyurov 32.0%. Pre-election polling had suggested a double-digit Yotova lead and even a possible landslide; Gyurov's performance was far stronger than expected, leaving the runoff open. Turnout was a record low. THE FRAMING IS THE SUBSTANTIVE DEVELOPMENT: Prime Minister Radev, who backs Yotova, said on Monday that in the runoff people will have to choose between 'peace and war', suggesting Yotova can ease the situation with Russia while likening Gyurov's pro-EU and pro-Ukraine positions to warmongering. WHY THIS MATTERS DIRECTLY: Bulgaria is the NATO and EU member in whose exclusive economic zone merchant ships have been sunk with crews lost, and the state that has declined both to attribute the attacks and to invoke Article 4. The presidency is largely ceremonial but commands the armed forces and sets foreign-policy tone, and the campaign has now explicitly polarised around whether accommodation with Moscow or alignment with Kyiv is the safer course for a country being attacked at sea. Score remains 3. WATCH: the 1 November result, and whether it changes Sofia's position on attribution, on Article 4, or on the halted weapons deliveries to Ukraine. Sources: Central Election Commission via AP and Balkan Insight, Radev via Balkan Insight, Novinite.
2026-10-253BULGARIA'S PRESIDENTIAL ELECTION GOES TO A RUNOFF, AND THE EXIT POLLS DISAGREE ON WHO LEADS. Alpha Research put incumbent Iliana Yotova on 35.3% to Andrei Gyurov's 32.4%; Market Links put Yotova on 32.2% to 31.6%; at least one exit poll put GYUROV AHEAD by 0.8%. None reached the 50% needed, so a second round follows. Kostadin Kostadinov of the pro-Russian Vazrazhdane took around 13.5%. Turnout set a record low, and both leading candidates finished well below their pre-election polling - Yotova was on 41-47% two days earlier. The campaign was dominated by the drone attacks on merchant ships off Bulgaria's own coast, alongside energy prices and inflation. WHY THIS MATTERS FOR NATO-RUSSIA RISK, DIRECTLY: Bulgaria is the NATO and EU member in whose exclusive economic zone ships have been sunk with crews lost, and it is the state that has so far declined both to attribute the attacks and to invoke Article 4. Whether these incidents remain a national maritime-security problem or become an alliance matter depends substantially on decisions taken in Sofia. The two candidates differ on exactly that question: Yotova convened the emergency Security Council and refused to blame Russia pending investigation; Gyurov, a former caretaker prime minister, has backed Ukraine firmly and signed a security cooperation agreement with Kyiv during his premiership. The presidency is largely ceremonial but commands the armed forces and shapes foreign-policy tone, while Radev's government favours mending ties with Moscow and has halted weapons deliveries to Ukraine. Score remains 3. WATCH: the runoff, and whether it changes Sofia's position on attribution or Article 4. Sources: Sofia Globe, Novinite, Euronews, Guardian live coverage.
2026-10-233CONFIRMED ON THE RECORD BY NATO, AND THE WORDING IS NOTABLE. Alliance spokeswoman Allison Hart said NATO has sent additional surveillance and reconnaissance forces to the Black Sea amid what she described as a series of deadly attacks that Russia is carrying out on merchant ships carrying Ukrainian cargo. That is the first time the alliance itself has attributed the campaign to Russia in plain terms, where Romania and Bulgaria have both declined to. Rubio and Rutte discussed Black Sea security by telephone the same day, alongside preparations for December's NATO foreign ministers' meeting. Score remains 3. The open question is unchanged: neither littoral ally has invoked Article 4, and the response remains surveillance and air defence rather than escort or interdiction. Sources: Allison Hart via RIA and Vzglyad, State Department readout via EADaily.
2026-10-213NATO AGREES TO REINFORCE - AIRCRAFT, RADARS AND DRONES, BUT NO WARSHIPS. Following the Council session the alliance will send additional MARITIME PATROL AIRCRAFT, RADAR SYSTEMS AND DRONES to the Black Sea. The European Council separately condemned the attacks on civilian shipping and called for the restoration of free navigation. Bulgaria's defence minister reversed an earlier position and confirmed the country will join the Drone Edge counter-drone project by the end of October, alongside its request for allied aircraft, air policing and surface-to-air missile systems. Turkey is reported to want all riparian states summoned to plan escorted convoys through a militarised safe corridor. WHAT THE RESPONSE IS NOT: no NATO warships are being sent, and no alliance-wide policy of shooting down drones over the Black Sea has been established. Only three members have Black Sea coasts - Turkey, Romania and Bulgaria - and under Montreux the alliance's options rest on their navies plus air and surveillance assets. Carnegie Europe's Bechev argues the strikes test the mutual defence clause directly and that the response belongs to NATO rather than the EU, because the two states want a regional command including Turkey. TIMING WORTH NOTING: Bulgaria elects a president on 25 OCTOBER, and its current government favours mending ties with Moscow. Score remains 3. Sources: Defense Post citing the alliance decision, Carnegie Europe via bne IntelliNews, AP via PBS, Bulgarian News Agency, European Council conclusions.
2026-10-203THE COUNCIL MEETS TODAY, AND NEITHER ALLY HAS INVOKED ARTICLE 4 - which is the most informative fact in this entry. The special North Atlantic Council session on Black Sea defence and deterrence convenes at Romania's initiative. Romanian sources confirm that Bucharest and Sofia have chosen FOR NOW not to trigger Article 4 consultations: Radev says Bulgaria will not accuse any party without clear evidence, and Dan says Romania wants all precise data first. Both are instead pursuing capability: Bulgaria has approved an expanded order of German IRIS-T air defence systems and joined Drone Edge; the two are accelerating an EU MARITIME SECURITY HUB in the Black Sea; Romania has proposed a joint Romania-Bulgaria-Turkey command. Rutte says NATO will adapt its deterrence and defence posture in the region. RUSSIA'S PRE-EMPTIVE FRAMING, published the same morning: the foreign ministry's European department director Maslennikov told Izvestia that a NATO Black Sea command would threaten escalation, and alleged that reconnaissance aircraft based at Constanta monitor the sea continuously and pass the data to Kyiv - the same argument Moscow uses to justify striking vessels it calls military resupply. CONTEXT WORTH KEEPING: allies have run no rotational naval deployments in the Black Sea since 2022, so the instruments available are air defence, surveillance and national navies rather than NATO ships. Score remains 3. Sources: Radio Romania International, Romania Journal, Türkiye Today, IBTimes, Izvestia (Russian MFA).
2026-10-193MOSCOW CLAIMS A SECOND STRIKE ON MERCHANT SHIPPING, AND THE ALLIANCE CONVENES. Russia's defence ministry announced on Telegram that it had carried out a military operation in the Black Sea, striking a dry cargo ship bound for Odesa which it said was carrying cargo for Ukraine's armed forces. This is the second open Russian claim in five days, after the 15 October statement about 'two dry cargo vessels delivering military cargo to Odesa'. Moscow is no longer leaving these unattributed - it is asserting a legal frame, that the vessels are military resupply and therefore legitimate targets, which is precisely the argument that would be deployed if a ship were struck inside allied waters. THE NORTH ATLANTIC COUNCIL MEETS TOMORROW, 20 OCTOBER, on Black Sea security, at Romania's initiative. SCALE: the Guardian reports that of more than 60 seafarer deaths in the Black Sea since the full-scale invasion began, the overwhelming majority occurred in the past year, and warns of rising global food-security risk. A US Bombardier ARTEMIS II surveillance aircraft spent more than four hours over the Black Sea about 100 km from Crimea, flying from Mihail Kogalniceanu in Romania. Score remains 3, the maximum. The question the NAC answers tomorrow is whether the alliance treats this as a shipping-protection problem or as an Article 4 matter. Sources: Russian defence ministry via Lenta, Guardian via Ukrinform, RIA on the surveillance flight, vidomo security review.
2026-10-163BULGARIA FORMALLY REQUESTS NATO COMBAT AIRCRAFT; ALLIANCE RESPONSE TAKES SHAPE. Defence Minister Stoyanov said on 16 Oct that Bulgaria has formally asked NATO to deploy COMBAT AIRCRAFT and anti-drone systems to bolster its defences; a NATO official said ambassadors would discuss the request further. Sofia has also proposed a MORATORIUM ON ATTACKS ON CIVILIAN SHIPS in the Black Sea, and expects to join NATO's Drone Edge counter-drone project - launched in July with Romania already a member, investing over USD 40bn over five years - by the end of October. Romania's acting defence minister Miruta proposed on 14 Oct that the three littoral allies, Romania, Bulgaria and Turkey, establish a JOINT MILITARY COMMAND for drones, sunken vessels and naval mines. SACEUR Grynkewich is consulting allied defence chiefs; Rutte, after meeting Radev and Dan, said NATO has strengthened its eastern-flank posture including counter-drone capabilities and will keep adjusting. SCALE AND ATTRIBUTION: at least seven cargo vessels have been attacked this month off the two allies' coasts. Bulgaria said on 14 Oct that Russia was LIKELY behind attacks that struck four ships in a week, sinking two, while stating there is no way to prove Moscow's culpability. AP reports some allies now wonder whether Putin is seeking escalation to test their support for Ukraine. A NATO source captured the practical problem: escorting third-flag merchant ships - 'a ship from Bermuda with an Argentinian owner carrying grain from Egypt' - is difficult to organise. Score remains 3, the maximum. Sources: Reuters via US News, AP via PBS, Stars and Stripes, Brussels Signal, Euronews.
2026-10-153INSIDE TERRITORIAL WATERS, AND THE FIRST RUSSIAN ADMISSION OF STRIKING SHIPPING. Overnight into 15 Oct drones struck two chemical tankers at the mouth of the Sulina canal, the entrance to the Danube route Ukraine uses to export: the San Marino-flagged WINE TRADER, hit 13 nautical miles south-east of Sulina - one mile OUTSIDE Romanian waters - with seven or eight of twelve crew missing, and the Comoros-flagged YARA J. Romania's navy says two further vessels were targeted, the Marshall Islands-flagged SEA DESTINY INSIDE ROMANIAN TERRITORIAL WATERS and the Tanzanian-flagged DANIA J moored at the Ukrainian Danube port of Izmail. President Dan, speaking in Brussels before the EU summit, said simply 'two air drones hit them' and declined to name Russia; Romanian officials noted the fires coincided with Russian drones entering Romanian airspace but stopped short of linking them. THE RUSSIAN DEFENCE MINISTRY SAID IT HAD STRUCK, AT SEA, 'two dry cargo vessels delivering military cargo to the port of Odesa' - the first time Moscow has acknowledged hitting merchant shipping in this campaign, while characterising the targets as military resupply rather than civilian traffic. RUNNING TOTAL: at least five other cargo ships hit off Romania and Bulgaria in ten days, with at least 23 sailors dead or missing, all previously OUTSIDE NATO territorial waters; this is the first inside. Rutte met Radev and Dan the same day. Radev's formulation: 'We don't believe that Ukraine will attack its own ships and crews, so the results of this attack favour Russia.' Score cannot rise - 3 is the maximum - so the significance is recorded here and in the current read: the campaign has crossed from exclusive economic zones into the territorial sea of a NATO member, and one party has partially claimed it. Sources: Reuters via US News, The Print and RTE; Al Jazeera; Romanian naval authority; Russian MoD via EADaily.
2026-10-143CHECKED, NO NEW ATTACK OVERNIGHT, and the political context matters for reading the response. Prime Minister Radev, a former president widely described as pro-Russian, won the April 2026 parliamentary election, and his government has since HALTED ALL WEAPONS DELIVERIES TO UKRAINE - Bulgaria having previously been a key supplier of Soviet-standard artillery shells. That makes his formulation on 13 Oct - 'we lack solid, clear evidence to level accusations against any specific party; however, logic suggests the outcome works to the advantage of the Russian Federation' - more striking rather than less: it is the most Moscow-leaning government in the affected states that summoned the Russian ambassador. The national investigation into drone origin continues and remains the thing that could settle attribution. Separately, Ukraine was reported to have struck a Liberian-flagged tanker off the southern Russian coast, so its own campaign against shipping continues in parallel. Score holds at 3. Sources: Kyiv Post, AP, newsbytes summary of EU designations.
2026-10-133RAISED 2->3, AND THE ATTRIBUTION IS GENUINELY OPEN. Second wave: CHELSEA 3 - Maltese-flagged but UKRAINIAN-OWNED and registered at the port of ODESA - was hit by three aerial drones 15 to 18 nautical miles off Byala while sailing from Giresun in Turkey to GIURGIULESTI in Moldova, the Danube port used for Ukrainian trade. All 15 crew (seven Ukrainians, eight Azerbaijanis) were rescued, five treated; the ship is drifting unmanned off Cape St Athanasius. A second, unidentified vessel sank about 17 nautical miles east of Krapets with one crew member rescued and eleven missing. Bulgaria summoned the Russian ambassador. WHAT IS AND IS NOT ESTABLISHED: no party has claimed any of these attacks; the drones are described officially as of unknown origin; Russia's embassy in Sofia denied involvement and stated that Alfa Watan was not among the ships targeted by Russian drones, while the Russian defence ministry said an investigation is needed to determine where the drones came from; Zelensky blamed Russia and separately denied Ukrainian responsibility; Radev chose the careful formulation that 'the outcome benefits the Russian Federation' rather than asserting Russian authorship. THE STRONGEST CIRCUMSTANTIAL ARGUMENT AGAINST UKRAINIAN RESPONSIBILITY is that Chelsea 3 is Ukrainian-owned, Odesa-registered and carrying cargo toward Moldova - an implausible Ukrainian target - and that the earlier victims were Turkish-owned grain carriers rather than shadow-fleet tankers on Russian oil routes, which is what Ukraine's naval drone campaign has consistently attacked. THE COHERENT MOTIVE for Russia is interdiction of the Danube-Black Sea grain corridor that replaced the Black Sea Grain Initiative. UNRESOLVED AND WORTH PURSUING: Alfa Watan's cargo was never declared publicly, two of the three struck Turkish vessels share one Istanbul operator, and nobody has published AIS histories or wreck evidence. The score reflects the LEVEL OF ACTIVITY in NATO members' waters - deaths, sinkings, repetition - not a finding about who is responsible. Sources: Radev via Marine Insight and Bulgarian National Radio/Interfax-Ukraine, Militarnyi, Russian embassy in Sofia and Russian MoD statements, Zelensky via Kyiv Independent.
2026-10-072Bulgaria convened an emergency Security Council. President Yotova said Russia's war has caused 'a significant deterioration of the security environment in the Black Sea region' but DECLINED TO BLAME RUSSIA DIRECTLY for the strikes, citing the ongoing national investigation. Russia's defence ministry said determining the 'nationality' of the drones requires waiting for the investigation's results. Sources: AP, Bulgarian News Agency.
2026-10-062FIRST ATTACK ON SHIPPING INSIDE A NATO MEMBER'S EEZ - VESSEL DETAIL MATTERS. Sea and aerial drones struck two ships about 70 nautical miles east of Byala. ALFA WATAN (IMO 7510884, Togo flag, Turkish-owned, Istanbul company Spring Marine Denizcilik) was sailing NORTHWARD from Al Arish in Egypt to Sulina in Romania; its cargo was unknown to the Bulgarian authorities; it sank with 12 Syrian crew missing. ABLE (IMO 9001136, Palau flag, Turkish-owned, Ocean Eagle Shipping & Trading) was carrying WHEAT from Galati in Romania to Istanbul; it caught fire and all 18 crew were evacuated, two seriously injured. Both are old vessels under flags of convenience - the profile of small Black Sea tramp operators and also of the shadow fleet; neither was on a Russian oil route. NOTE THE OPERATOR PATTERN: Alfa Watan and the Royad Mammadov, struck a day earlier, belong to the SAME Istanbul company. Sources: Radev via Al Jazeera, Militarnyi and Seawanderer with IMO numbers and routes, New Voice of Ukraine citing Klymenko.
2026-10-052A Turkish-owned cargo ship carrying corn caught fire after a drone attack and sank off ROMANIA's coast. Two crew died, eleven were rescued - the first deaths from the maritime drone campaign in NATO members' Black Sea approaches. Sources: Romanian authorities via CBC, Euronews.
2026-09-302CHECKED, NO CHANGE (2). No further Black Sea coastal incidents found since August. Pattern to date: objects from both belligerents reaching Romanian and Bulgarian territory, twice within a kilometre of energy infrastructure, no casualties, no deliberate targeting established.
2026-09-272CHECKED, NO CHANGE (2). No further Black Sea coastal incidents found since August. Pattern to date: objects from both belligerents reaching Romanian and Bulgarian territory, twice within a kilometre of energy infrastructure, with no casualties and no deliberate targeting established.
2026-09-212Baseline 2: Constanța port naval-drone explosion (5 Jun 2026, Ukrainian drone per Romanian MoD); Neptun Deep drifting drone destroyed by F-16s (20–21 Aug 2026; origin attributed to Russia by the president, disputed by independent analysts, e.g. New Eastern Europe 10 Sep 2026); VSquare documented coordinated online amplification. Bulgarian coast not yet checked in depth.
2026-08-212Romanian F-16s destroy a drifting explosive drone a few hundred metres from the Neptun Deep gas platform; President Dan says it came from Russia, while independent analysts note the origin of such drifting objects is hard to establish quickly. Sources: Romanian MoD, New Eastern Europe (10 Sep 2026).
2026-08-082BULGARIAN GAP FILLED (previously recorded as 'no comparable incident found'). A drone carrying a significant quantity of explosives entered Bulgarian airspace on the morning of 8 Aug, exploded near the Kardam border crossing with Romania in the north-east, about 1,000 m from a compressor station on the Trans-Balkan gas pipeline, and crashed in a field. No casualties. Announced by PM Radev. This is the first Bulgarian event in this indicator and it sat close to energy infrastructure. Sources: HINA via Dnevnik.hr, Bulgarian government statement.
2026-06-052A Ukrainian naval drone self-detonates in Constanta port near an oil terminal; 1,300+ evacuated from nearby beaches. Source: Romanian MoD via G4Media.

← H01 Northern Adriatic: drones or sabotage near military and energy sites H03 Baltic coast (NATO countries): sabotage of undersea and coastal infrastructure →