Skip to main content
Hybrid WarfareStakes Watch· 4 min read· in Defense & Security

Poland Confirms Sabotage of Starlink Ground Station as Russian Drones Crash in NATO-Member Romania

Polish officials confirmed that a fire at a critical Starlink ground station was an act of sabotage, occurring on the same night Russian military drones breached NATO airspace and crashed in Romania and Moldova.

By Marina Lopez

NATO Defense Planners 40%Intelligence Analysts 40%National Security Officials 20%
NATO Defense Planners
Focuses on the operational challenge of intercepting low-cost drones under restrictive peacetime rules of engagement.
Intelligence Analysts
Views the overlapping incidents as a coordinated hybrid warfare campaign designed to test NATO's red lines.
National Security Officials
Emphasizes the immediate need to secure critical domestic infrastructure against physical sabotage.

Perspectives this story doesn't cover

  • Russian Military Command
  • Local Border Residents

Why this matters

The simultaneous breach of NATO airspace and the physical sabotage of military communications infrastructure inside Poland suggest that the boundary between hybrid provocations and direct kinetic military action is rapidly narrowing.

European defense officials characterize the simultaneous drone incursions and infrastructure fires as a coordinated escalation of hybrid warfare, while Moscow maintains its routine denial of intentional airspace violations or sabotage operations. The overlapping incidents across three countries on a single night have forced NATO commanders to confront a narrowing gap between peacetime provocations and kinetic military action.[4]

The sequence of events began on the evening of September 23, 2026, when a fire engulfed the power system and backup generator at a Starlink ground station in Wola Krobowska, located in central Poland. Polish Deputy Prime Minister Krzysztof Gawkowski confirmed the blaze was a deliberate act of sabotage aimed at severing internet access for the Ukrainian military. The facility, which serves as a critical communications node, was temporarily disrupted but has since resumed normal operations.[1][4][5][6]

Hours later, during a massive Russian aerial assault on Ukraine involving more than 300 weapons, multiple drones breached the airspace of neighboring nations. A Russian Geran strike drone crossed into Romanian airspace near the northern region of Botoșani shortly before sunrise on September 24. The unmanned aerial vehicle traversed Romanian territory for approximately four minutes before crashing in a forest near the village of Solca in Suceava County.[2][3]

The Romanian Defense Ministry tracked the drone's trajectory from Ukrainian airspace and scrambled two F-16 fighter jets from the Borcea airfield, a major NATO air defense base in the southeast. However, the fighters failed to intercept the low-flying drone. Acting Romanian Defense Minister Radu Miruță attributed the failure to the constraints of peacetime rules of engagement rather than technical shortcomings. "The Romanian Army and Romania are in a time of peace. Those who carry out such activities in violation of airspace, in violation of international law, must realize that it is not allowed," Miruță stated.[2][3]

The overlapping incidents occurred across three European nations within a 24-hour window.
However, the fighters failed to intercept the low-flying drone.

Simultaneously, Moldovan authorities reported that a Russian Gerbera-type drone crashed in Cernița, within the Florești district. The device, equipped with an onboard camera, struck a tree and exploded. Ukrainian civilian air watch networks indicated that up to four Russian drones may have crossed into Moldova during the night, with two crashing and two potentially continuing toward Romania, though official sources have only confirmed the single Gerbera crash in Moldova.[2][3][4]

The Institute for the Study of War (ISW) has synthesized these events into a broader pattern of Russian pressure on European defense infrastructure. The institute connected the drone crashes and the Polish Starlink sabotage to a 45-minute suspension of operations at Berlin-Brandenburg airport the same evening, which was triggered by an unconfirmed drone sighting. According to the ISW, these incidents represent an effort by the Kremlin to normalize airspace violations and degrade Europe's logistical support for Ukraine.[4]

The financial asymmetry of these encounters continues to challenge NATO air defense networks. Alliance commanders are frequently forced to deploy manned aircraft costing tens of millions of dollars to track and intercept cheap Russian drones that typically cost between $50,000 and $75,000 to produce. This dynamic has led to regular, unimpeded violations of NATO airspace since September 2025.[3]

Western intelligence agencies are increasingly sounding the alarm over the trajectory of these operations. On September 24, Danish Defense Intelligence issued an assessment warning that Russia will likely intensify its hybrid warfare campaign in the coming months. The agency noted a low but growing risk of a limited Russian military attack on a NATO border state, suggesting that Moscow is actively diversifying its platforms for conducting sabotage and disruptive cyber attacks.[4][5]

As investigators comb through the drone debris in Romania and Moldova, and Polish authorities secure the Wola Krobowska Starlink facility, the alliance faces mounting pressure to adjust its defensive posture. The events of September 23 and 24 demonstrate that the infrastructure sustaining the Ukrainian war effort—whether digital or physical—remains highly vulnerable to cross-border interference.[3][4][6]

Viewpoints in depth

NATO Defense Planners

Military commanders are grappling with the financial and operational asymmetry of countering cheap drones with advanced fighter jets.

For NATO air defense networks, the recurring drone incursions represent a severe resource mismatch. Commanders are forced to scramble advanced F-16 and F-18 fighter jets to intercept Geran and Gerbera drones that cost a fraction of the price of a single air-to-air missile. Furthermore, peacetime rules of engagement heavily restrict the ability of pilots to engage targets over populated areas, leading to situations where hostile drones can traverse NATO airspace for minutes at a time without being neutralized. Planners are increasingly advocating for the deployment of specialized, lower-cost interception systems and revised engagement protocols to handle the persistent threat.

Intelligence Analysts

Strategic observers assess that Moscow is deliberately blurring the line between accidental spillover and intentional provocation.

Organizations like the Institute for the Study of War and European intelligence agencies view the simultaneous events in Poland, Romania, and Moldova not as isolated accidents, but as a cohesive strategy. By combining physical sabotage of communications infrastructure with airspace violations, the Kremlin aims to normalize low-level aggression and degrade Europe's logistical support for Ukraine. Analysts warn that this "salami-slicing" approach is designed to test NATO's Article 5 thresholds, gradually escalating the intensity of hybrid operations while remaining just below the level of an undeniable kinetic attack.

Key points

  • Polish officials confirmed a fire at a Starlink ground station in Wola Krobowska was deliberate sabotage.
  • A Russian Geran drone entered Romanian airspace and crashed near Solca after Romanian F-16s failed to intercept it.
  • A Russian Gerbera-type drone crashed in Moldova's Florești district on the same night.
  • The Institute for the Study of War linked the events to a broader Russian hybrid warfare campaign against European infrastructure.
  • Danish intelligence warned of an increasing risk of limited Russian military attacks on NATO border states.

How we got here

  1. Sept. 23, 2026

    A fire breaks out at a Starlink ground station in Wola Krobowska, Poland, later confirmed as sabotage.

  2. Sept. 23, 2026

    Operations at Berlin-Brandenburg airport are suspended for 45 minutes following an unconfirmed drone sighting.

  3. Sept. 24, 2026

    A Russian Geran drone breaches Romanian airspace and crashes near Solca, while a Gerbera drone crashes in Moldova.

  4. Sept. 24, 2026

    Danish Defense Intelligence issues a warning regarding the growing risk of limited Russian military attacks on NATO states.

Sources

Source coverage

6 outlets

3 viewpoints surfaced

NATO Defense Planners 40%Intelligence Analysts 40%National Security Officials 20%
  1. [1]Times of MaltaNational Security Officials

    Poland says fire at Starlink station is sabotage

    Read on Times of Malta →
  2. [2]The Kyiv IndependentNATO Defense Planners

    Suspected Russian drones crash in Romania, Moldova

    Read on The Kyiv Independent →
  3. [3]Kyiv PostNATO Defense Planners

    NATO Scrambles F-16s and F-18s in Failed Intercept of Russian War Drone Over Romania

    Read on Kyiv Post →
  4. [4]Euromaidan PressIntelligence Analysts

    ISW connects drone crashes in Moldova and Romania, a Starlink fire in Poland, and a Berlin airport shutdown into one Russian pattern

    Read on Euromaidan Press →
  5. [5]The Irish TimesIntelligence Analysts

    Poland says Starlink station blaze was sabotage as Denmark warns of rising Russian threat

    Read on The Irish Times →
  6. [6]The InsiderNational Security Officials

    Polish officials suspect sabotage after fire at Starlink station providing internet to the Ukrainian military

    Read on The Insider →

Comments

Stay informed

Every angle. Every day.

Get Defense & Security stories with full source coverage and perspective breakdowns delivered to your inbox.