Escalation watch › Ukraine linkage › U02

Airspace spillover into NATO states

U02 · Both · checked 2026-11-09 · reviewed Every run · priority

Roberts Skrauch, adviser to the Latvian armed forces, said on 4 November that the drone which fell overnight in BALVI district, near the Russian border, PRESUMABLY BELONGED TO UKRAINE'S ARMED FORCES - the third Baltic incident this autumn initially read as…

Escalation signal

Civilian deaths on NATO soil; deliberate strikes; Russian interception over NATO territory

Baseline (21 Sep 2026)

Romania: 23+ violations in 2026; stray drones in Finland/Baltics

Where to check

G4MediaERR / LSM / LRTADS-B Exchange

Check log

• 2026-11-043THE LATVIAN DRONE WAS PROBABLY UKRAINIAN, AND THERE WERE TWO INCIDENTS NOT ONE. Roberts Skrauch, adviser to the Latvian armed forces, said on 4 November that the drone which fell overnight in BALVI district, near the Russian border, PRESUMABLY BELONGED TO UKRAINE'S ARMED FORCES - the third Baltic incident this autumn initially read as Russian and subsequently attributed to Ukraine, after Lithuania on 18 October and a Lithuanian case in March. THE TWO SEPARATE EVENTS: on the evening of 1 November an unidentified drone violated Latvian airspace over Kraslava and Ludza districts, prompting an orange alert; it left Latvian airspace seventeen minutes later ACROSS THE LATVIAN-RUSSIAN BORDER, and Latvia launched a BLAZE interceptor drone which was then SELF-DESTRUCTED at 19:19 near the frontier specifically to avoid violating Russian territory. Then at 00:10 on 3 November an air alert was declared over Ludza and Balvi, NATO air policing fighters were employed over the Baltic states, Latvia again deployed interceptor drones, and an object fell in Balvi where ground searches began. Debris from a fallen drone had also been found on 24 October. Defence Minister Melnis: 'We continue to monitor our airspace and carry out our tasks so that citizens can feel safe.' TWO THINGS WORTH HOLDING TOGETHER: Latvia now has a working interceptor-drone capability and the restraint to destroy its own munition rather than cross a border - which is the opposite of the escalation dynamic this indicator exists to catch; and the objects prompting these responses keep turning out to come from the side NATO supports. Lavrov's standing claim is that Russia never directs drones or missiles at European or NATO states. Score holds at 3. Sources: Latvian armed forces and Skrauch via Delfi and Rambler, Latvian MoD via eurointegration, Melnis via eurointegration.
• 2026-10-193THE CAPABILITY GAP, FROM A NAMED NATO OFFICER. Guillaume Thomas, deputy commander of NATO's air forces, told the outlet Rapporteur that the alliance's air defence lacks sufficient means of detection and interception. This is an allied source stating the shortfall directly, not an adversary's characterisation of it, and it matches Vandier's falling intercept figures and the two-to-four-minute engagement windows over Romania. For this indicator the implication is practical rather than political: the margin for misidentification and for failed intercepts over allied territory is widening, and both are routes to an incident nobody intends. Sources: Guillaume Thomas via Rapporteur, reported by Izvestia; CBC for Vandier.
• 2026-10-183THE DRONE THAT EXPLODED OVER LITHUANIA WAS UKRAINIAN. SEPARATE THE ADMISSION FROM THE EXPLANATION. WHAT IS ESTABLISHED: Kyiv acknowledges the drone was Ukrainian. That is an admission against interest and is treated here as fact. WHAT IS NOT: Ukraine's account of WHY it was there - that Russian electronic warfare diverted it from targets in Russia - is a belligerent's explanation of its own weapon landing on an ally's territory, unverified, and self-exculpatory. Vilnius has echoed it, which is diplomatically convenient for both; Warsaw has not confirmed Lithuania's claim that the drone entered from Polish airspace, so two allies disagree on the route. ALTERNATIVES NOT EXCLUDED BY ANY PUBLISHED EVIDENCE: navigation or guidance failure; GPS interference of undetermined origin, since jamming in the region comes from several sources; or deliberate routing around Russian air defences, which is what Tusk's statement implicitly guards against - 'Poland does not allow operations to be conducted on or over our territory without the explicit consent of the Polish state. That will not change, no matter who might be conducting those operations.' Kyiv had previously denied using NATO airspace for attacks on Russia. WHAT WOULD SETTLE IT: the debris and flight-path analysis Lithuania has promised, and whether Poland's radar record corroborates entry from its territory. Earlier Ukrainian drones crashed in Lithuania, Latvia, Estonia and Finland during 2026, so this is a series, not an isolated event. Sources: Ukrainian foreign ministry, Tusk via RMF24 and Kyiv Independent, Lithuanian government.
• 2026-10-173ROMANIAN F-16s DOWN TWO DRONES OVER ROMANIAN AIRSPACE. Foreign Minister Oana Toiu said the first entered at 17:59 local time and was destroyed within two minutes, 25 km south-east of Sulina; the second was engaged at 18:05 and downed four minutes after entry, 20 km east of Sulina. Romania lodged a protest with Russia asserting clear attribution. WHAT IS AND IS NOT ESTABLISHED: the intercepts and timings come from the Romanian government; the identification of the aircraft as Russian Geran variants with turbojet propulsion comes from Romanian officials and specialist commentary, not from published debris analysis, and should be treated as an attributed claim until Romania releases fragment evidence - the same standard applied to Russian claims elsewhere in this tracker. THE UNDERLYING TECHNICAL TREND IS BETTER SOURCED INDEPENDENTLY: Admiral Pierre Vandier, NATO's Supreme Allied Commander Transformation, told CBC that newer propulsion has cut interception success rates against certain Russian drones from roughly 90% earlier this year to about 50%, and Zelensky put the rate near 55% at the end of September. Faster drones and falling intercept rates are therefore established by named allied and Ukrainian sources regardless of what type Romania downed. Sources: Romanian foreign ministry via IANS; Vandier via CBC; migflug (enthusiast analysis, weak).
• 2026-10-023CHECKED, NO CHANGE (3). No new incursion in the last 24 hours. Estonia's foreign ministry frames the pattern as the Russian threat increasingly affecting Europe as a whole; Romania's own ministry declines to call it deliberate targeting. Both readings sit in the log.
• 2026-10-013CHECKED, NO CHANGE (3). No new incursion found overnight. IMPORTANT REFRAMING: the majority of documented Baltic incidents involve UKRAINIAN drones diverted by Russian jamming, not Russian drones aimed at NATO. The escalation is real - NATO jets are firing over allied territory and a NATO government has fallen over it (see P06) - but its mechanism is spillover and electronic warfare, not deliberate Russian targeting of NATO states. That distinction matters for what this indicator predicts.
• 2026-09-303CHECKED, NO CHANGE (3). This is the most current indicator in the tracker - its latest event is a week old and the pattern has run continuously since July. Romania has counted 18 incursions in 2026 against 15 in the previous four years combined. Unlike most indicators here, this one does not depend on old evidence.
• 2026-09-233NEW SINCE LAST CHECK. A Russian Mi-8 helicopter from Kaliningrad crossed about 350 yards into Polish territory and stayed 42 seconds; Poland scrambled fighters and called it a deliberate test of NATO air defence preparedness. The day before, Polish fighters intercepted a Russian Il-20 reconnaissance aircraft about 30 miles off the Polish coast, and Spanish F-18s on NATO air policing in Romania scrambled against targets over Ukraine near the border. Polish command frames these as constant pressure rather than isolated incidents. Score holds at 3. Source: Stars and Stripes, 24 Sep 2026.
• 2026-09-153QUIET-PERIOD TEST APPLIED - NOT LOWERED. New qualifying events well inside the one-month window: an Italian NATO fighter shot down a drone carrying an explosive device over Lithuania, the device being neutralised on the ground near a pumped-storage plant; Crosetto said it most probably came from Russia. A Russian warship fired two emergency flares at a Danish helicopter in the Baltic; Poland recovered a Russian drone from the sea near Jaroslawiec and scrambled jets against jet-powered Russian drones striking Ukraine. The EU called the behaviour reckless and dangerous. Score holds at 3. Sources: Irish Times, ABC News (23 Sep, further Polish and Romanian scrambles).
• 2026-08-303COUNTERWEIGHT, LOGGED AGAINST THE SCORE. Two institutional assessments cut against reading these incursions as pre-attack indicators. An EU official said on 27 Aug there are no signs Russia is preparing a military attack on NATO countries, and a NATO official said on 30 Aug that Russia is stepping up hybrid acts - cyber, sabotage, influence - while the alliance sees no imminent threat of a conventional attack. Separately, the US commander in Europe judged that Russia will not test NATO because it knows it cannot beat it, against a Swedish warning that Moscow may attack in the near term to test the alliance. The score stays at 3 because it measures what is happening (routine kinetic engagement over allied territory), not what it portends - but the alliance's own reading is that this is hybrid pressure, not an attack indicator. Sources: NATO and EU officials via LBCI/Reuters, ground.news digest, New York Sun.
• 2026-08-203Scale: Romania counts 33 incursions since 2022, 18 in 2026, with four shoot-downs this year; IISS counts 144 drone incursions over European airports and military sites alliance-wide since Aug 2024; a Russian cruise missile came down 100 km inside Poland. Counter-note: no ally has requested Article 4 consultations since Sep 2025 - this is being normalised as below-threshold. Sources: Grosswald running record, Carnegie.
• 2026-08-153ATTRIBUTION WARNING, added 2 Oct. Lithuanian military intelligence warned that Russia could use CAPTURED UKRAINIAN DRONES against critical infrastructure in the Baltic region precisely to make it appear that Kyiv was responsible, with the stated aim of making NATO hesitate and reduce support for Ukraine. This cuts against the reframing logged on 1 Oct: 'the drones are mostly Ukrainian' is itself a conclusion an adversary has an interest in producing. Treat drone-origin attribution in this indicator as contested in both directions. Source: EUobserver citing Lithuanian military intelligence.
• 2026-08-123The North Atlantic Council meets over the Polish and Romanian violations and states that Russia bears full responsibility, citing its 'increasing tolerance for risk'. A cruise missile had come down 50 km from Lublin on 29 July. Note this supersedes my earlier remark that no consultations had occurred since Sep 2025: allies met, but no Article 4 request was made. Sources: NATO statement, Euronews.
• 2026-08-043A quadcopter carrying plastic explosives strikes a Ukrainian cargo aircraft at Leipzig/Halle, a NATO airlift hub, and fails to detonate; German authorities link it to Russian intelligence and to a 2024 parcel firebomb at the same airport. Sources: Al Jazeera, Dnevnik.hr (27 Aug).
• 2026-07-273BASELINE CORRECTION (events predate the tracker). Threshold crossed in July: Romania's first-ever drone interception, followed by two more within days, all by Romanian F-16s. NATO forces begin routinely engaging Russia-attributed drones over allied territory. Source: ABC News, 21 Aug 2026.
• 2026-05-193INDEPENDENT TALLY, added 1 Oct. Novaya Gazeta Europe counted at least 24 drone incidents in the Baltic states since the start of 2025 - 12 in Latvia, 7 in Lithuania, 5 in Estonia - and notes its own count is likely an undercount. On 19 May a NATO fighter downed a drone in Estonian airspace for the first time; on 20 May Lithuania declared its first-ever red-level air threat alert, with Vilnius residents told to seek shelter; on 8 June NATO jets downed a drone over Latvia for the first time, with Russian electronic warfare detected shortly before it crossed. Ukraine's foreign ministry says Russia uses electronic warfare to redirect Ukrainian drones; Russia's SVR claims Ukraine intends to strike Russia from Latvia, which Kyiv and Riga deny. Using an independent Russian exile outlet rather than NATO-state figures gives a count that neither belligerent controls. Source: Novaya Gazeta Europe (21 May 2026), Polskie Radio (8 Jun 2026).