Mystery Drones Over NATO Countries Raise Fears of Russian Hybrid Warfare Across Europe

BRUSSELS, Belgium, October 15, 2026: A growing wave of mysterious drone sightings over military installations, airports and critical infrastructure across Europe is raising serious security concerns among NATO allies, with defence experts warning that the incidents may form part of a broader Russian campaign designed to spread uncertainty, disrupt civilian operations and test Western security capabilities.

From Poland and Romania on NATO’s eastern borders to Germany, Belgium, France and Norway, unidentified drones have increasingly appeared near sensitive locations. While many incidents remain unexplained, security specialists believe the wider pattern is consistent with tactics associated with hybrid warfare, in which hostile activities are carried out without triggering a conventional military confrontation.

The growing threat has placed NATO governments in a difficult position. Responding too aggressively to unidentified aircraft could increase tensions, while failing to act could encourage further incursions and expose weaknesses in European air defence systems.

The concern comes as NATO’s senior military leadership has reaffirmed its readiness to respond to any direct attack on alliance territory. However, the expanding use of small, difficult-to-identify drones presents a different challenge, one that conventional military deterrence may struggle to address.

Unlike traditional aircraft, small unmanned aerial vehicles can operate at low altitudes, evade detection and approach sensitive locations without immediately revealing who controls them. Their relatively low cost also allows potential adversaries to create significant disruption without committing expensive military resources.

Germany has become one of the most affected countries.

According to information compiled by German federal authorities, more than 1,000 suspicious drone-related incidents have been recorded since January 2025. These sightings occurred near critical infrastructure, military facilities and companies involved in defence production.

The figure represents an average of approximately one and a half incidents every day, highlighting the frequency with which security agencies are now confronting unidentified aerial activity.

German air traffic authorities also recorded 261 drone-related disruptions at airports or within controlled airspace between January and August 2026, an increase of approximately 80 per cent compared with the corresponding period a year earlier.

The incidents have forced airport operators and aviation authorities to suspend flights, divert aircraft and introduce emergency safety procedures.

The consequences extend beyond national security. Even a single drone sighting near a major airport can disrupt thousands of passengers, interfere with commercial schedules and create substantial financial costs.

Similar problems have emerged elsewhere in Europe.

Norwegian authorities have reported more than 300 drone-related incidents this year, including six cases that interrupted airport operations. Britain has also experienced a reported increase in suspicious drone activity near military installations, while Belgium has recorded numerous sightings around strategically important facilities.

Several major European airports experienced disruptions during September.

On September 12, a suspected drone near Brussels Airport interrupted flight operations. A week later, another incident forced the diversion of 19 flights from Luxembourg Airport, affecting nearly 2,000 passengers.

Four days afterward, Berlin’s main airport temporarily suspended operations after an unidentified drone was spotted near its northern runway.

Although these incidents occurred in different countries, their frequency and proximity to sensitive infrastructure have intensified suspicions that at least some may be connected.

Ulrike Franke, a senior policy fellow at the European Council on Foreign Relations and an expert on drone warfare, believes the growing number of incidents is closely connected to Russia’s confrontation with Europe following its invasion of Ukraine.

She argues that the overall pattern, including the types of drones involved, their movements and the timing of their appearances, suggests activity that cannot be explained entirely by recreational operators or accidental violations of restricted airspace.

However, investigators face a major obstacle in establishing responsibility.

Many drones disappear before security personnel can identify their operators. Others may be mistaken for ordinary commercial aircraft, hobby drones or unrelated aerial objects.

This uncertainty makes it difficult for governments to determine which incidents represent genuine security threats and which are false alarms.

Experts believe that ambiguity may itself be part of the strategy.

By creating an environment in which authorities cannot easily distinguish hostile drones from harmless activity, a potential adversary can force governments to devote resources to repeated investigations and defensive responses.

The result is a continuing atmosphere of uncertainty that can undermine public confidence without requiring an openly declared military attack.

Former Belgian prime minister and European Parliament member Elio Di Rupo has described the situation as a form of hybrid warfare.

Such operations can combine drone activity, cyberattacks, sabotage, disinformation and other unconventional tactics intended to weaken an opponent while remaining below the threshold of conventional war.

The approach presents particular difficulties for democratic governments, which must balance security measures with legal protections, civilian aviation requirements and the need to avoid unnecessary escalation.

The scale of the problem is also difficult to measure because European countries do not use a single system for recording suspicious drone incidents.

National aviation authorities, police agencies and military organisations collect information through different procedures, making comprehensive comparisons challenging.

NATO itself has not provided a consolidated public count of drone sightings across member states, while European Union institutions have pointed to the responsibility of individual governments for national defence.

Despite these limitations, independent security researchers have identified a troubling pattern.

An assessment by the International Institute for Strategic Studies documented 144 suspicious drone incidents over sensitive locations in 12 NATO countries during an 18-month period ending in February 2026.

The assessment concluded that many of the drones operated with considerable freedom despite appearing near locations where unauthorised aerial activity would normally attract immediate security attention.

Researchers suggested that some drones may have been launched from vessels associated with Russia’s so-called shadow fleet.

These ships, including oil tankers and other commercial vessels, have been linked to efforts to transport Russian oil while avoiding Western sanctions and restrictions.

Their movements through European waters could potentially provide opportunities to launch drones near coastal infrastructure or strategically important facilities.

However, the theory does not establish that every suspicious drone originated from a Russian vessel, and the responsibility for many incidents remains unconfirmed.

Russia has repeatedly denied accusations that it is behind the drone activity.

The security debate intensified dramatically following an incident at Germany’s Leipzig/Halle Airport in August.

On August 4, authorities discovered a specially constructed drone carrying explosives near a Ukrainian Antonov cargo aircraft.

The airport serves as an important logistics centre for shipments supporting Ukraine, making the location particularly sensitive amid the continuing war.

German investigators concluded that evidence recovered from the drone pointed to Russian involvement.

The discovery represented a significant escalation because it involved an explosive-equipped unmanned aircraft near a Ukrainian cargo plane deep inside NATO territory.

Security officials subsequently examined whether the incident was connected to other suspected hostile operations across Europe.

The Leipzig case strengthened concerns that drone activity was moving beyond surveillance and disruption toward potentially destructive attacks against infrastructure associated with assistance to Ukraine.

Michelle Haas, a researcher specialising in European security at the Egmont Royal Institute for International Relations in Brussels, believes the incident demonstrated the risks faced by countries and companies supporting Ukraine.

She argues that such operations may be intended not only to cause physical damage but also to influence public opinion by increasing fears about the consequences of continued Western support for Kyiv.

If populations begin to associate assistance to Ukraine with threats to their own airports, military facilities and communities, political pressure could increase on governments to reconsider their policies.

This psychological dimension is one of the defining characteristics of hybrid warfare.

Rather than seeking immediate territorial gains, the objective may be to create uncertainty, weaken public confidence and encourage divisions within Western societies.

Following the Leipzig incident, European governments intensified diplomatic coordination and considered additional economic and security measures against Russia.

European Commission President Ursula von der Leyen described the episode as an escalation involving hostile activity on European Union territory and warned that similar incidents could become a recurring challenge.

Other NATO members, including Canada, expressed support for Germany and condemned suspected Russian actions.

The response reflected a broader shift among European leaders, some of whom had previously been cautious about publicly attributing unexplained incidents to Moscow because of concerns about escalating the conflict.

Nevertheless, identifying responsibility remains only part of the challenge.

European governments must also determine how to protect airports, military installations, energy facilities and other critical infrastructure from small unmanned aircraft.

Traditional air defence systems were largely designed to detect and intercept larger military threats, including fighter jets, bombers and missiles.

Small drones can be more difficult to track, particularly when operating close to buildings or in areas with heavy civilian activity.

Destroying a drone near an airport or populated location can also create additional dangers from falling debris or explosives.

Security experts therefore argue that governments need more specialised detection equipment, improved coordination between civilian and military authorities and clearer procedures for responding to unidentified aircraft.

The protection of nuclear power plants, defence manufacturing facilities and transportation networks has become particularly important because even limited disruption at these locations can have consequences far beyond the immediate incident.

At the same time, European leaders face the challenge of communicating the threat to the public without creating unnecessary fear.

Excessive alarm could serve the interests of those responsible for hostile operations by spreading anxiety and undermining confidence in government institutions.

Ignoring the problem, however, could leave communities unprepared for future incidents.

Experts believe a coordinated response must include better intelligence sharing, stronger infrastructure protection and public communication that distinguishes confirmed threats from incidents still under investigation.

The wider security implications extend to NATO’s ability to maintain deterrence while avoiding direct confrontation with Russia.

The alliance has traditionally relied on its collective defence commitments to discourage military aggression against member states.

Hybrid operations challenge that framework because they often fall into a grey area between criminal activity, espionage, sabotage and armed attack.

An unidentified drone approaching a military facility may represent surveillance, an attempt at intimidation or preparation for a more serious operation. Establishing the difference can require extensive investigation.

This uncertainty allows suspected hostile actors to create pressure while making a coordinated military response more complicated.

For NATO, the growing drone problem is therefore becoming a test of technological readiness, intelligence cooperation and political resilience.

The war in Ukraine has already demonstrated how unmanned aircraft can transform modern combat. Across Europe, the same technology is increasingly raising questions about the security of civilian infrastructure and the ability of governments to prevent unconventional threats.

Although the origins of many sightings remain unresolved, the overall increase in suspicious activity has made the issue impossible for European authorities to ignore.

As NATO countries strengthen their defences, the central challenge will be to respond firmly to credible threats without allowing uncertainty to dictate public policy or create divisions among allies.

The emerging drone campaign illustrates a changing security environment in which disruption, fear and ambiguity can become powerful tools.

For European governments, protecting their skies now means preparing not only for conventional military attacks but also for a persistent threat that may be difficult to see, difficult to attribute and increasingly difficult to stop.

Courtesy: CBC