Full Breakdown
Series of Starlink Sabotage Attacks Across Eastern Europe Raises Security Concerns
By Drooid · · How we work
Recent Arson Incidents Target Starlink Infrastructure
In the autumn of 2026 a cluster of arson-style attacks struck SpaceX’s Starlink ground installations in three Eastern-European countries. Bulgarian prosecutors allege that two 19-year-old German nationals set fire to a cluster of antennas near Sofia on the evening of October 9. The attack damaged 11 of 17 antennas at the site, with three destroyed completely, two partially, and three further units impaired.
In Poland, a Starlink station in Wola Krobowska was set ablaze on September 23, damaging electrical infrastructure and antennas. German authorities detained two Turkish nationals on October 12 and again reported their detention on October 16 under European arrest warrants at Poland’s request.
Lithuania experienced an attempted arson on October 18, when incendiary liquids and containers were found at a data-center facility housing nine Starlink antennas. Security guards extinguished the fire before firefighters arrived, preventing service disruption. As of October 19, no suspects had been detained.
Background & Context
Starlink’s satellite-based internet service, including the military-grade “Starshield” variant, has become a critical communications link for Ukraine’s armed forces amid Russia’s invasion. The repeated attacks have been framed by officials in the region as part of a broader “hybrid warfare” campaign aimed at undermining Ukraine’s operational capacity.
Data & Statistics
- Bulgaria: 18 antennas targeted; 3 destroyed, 2 partially damaged, 3 further damaged.
- Poland: Electrical distribution equipment and antennas damaged; exact count of antennas not disclosed.
- Lithuania: Facility contains nine antennas; fire caused only minor property damage and no service interruption.
Official Statements & Responses
- Plamen Tonchev, head of Bulgaria’s domestic intelligence agency DANS, said investigators are operating on the assumption of deliberate sabotage and warned that similar acts could occur in the future.
- Mindaugas Sinkevicius, Prime Minister of Lithuania, characterized the October 18 event as part of Russia’s hybrid war, noting that security measures had been heightened after prior warnings.
- Polish officials, including Prime Minister Donald Tusk, have labeled the September 23 arson as an act of “hybrid warfare” allegedly orchestrated by Russia, citing cooperation between Russian intelligence and organized-crime elements.
Verbatim Quotes
- “We understand that this was not a routine arson attack but an act of sabotage,” — Vilmantas Vitkauskas, head of Lithuania's National Crisis Management Center
Conflicting Reports & Gaps
- The Bulgarian incident is dated October 9 by court documents, while an Aerotime report suggests the attack may have occurred on October 12, though the date remains unconfirmed.
- No public evidence has definitively linked the Lithuanian attack to Russian actors; authorities have only expressed suspicion based on pattern analysis.
- The identities and motives of the perpetrators in Lithuania remain unknown, and no arrests have been reported as of October 19.
What’s Next
European arrest warrants have been issued for the two German suspects in Bulgaria, and authorities in Germany, Poland, and Lithuania continue intensive investigations. Lithuanian officials plan to convene a National Security Commission on October 19 to assess the broader threat landscape. Continued monitoring of Starlink’s role in Ukrainian military operations is expected to shape security responses across the region.