Two merchant vessels have been attacked by aerial and maritime drones in Bulgaria’s exclusive economic zone in the Black Sea, sinking one ship and forcing the evacuation of another. The incident follows a deadly attack on a grain carrier off Romania a day earlier and has prompted concern over the growing risks to civilian shipping close to EU and NATO territory.

Two commercial vessels were struck by drones in Bulgaria’s exclusive economic zone early on Tuesday, 6 October, in the first known attack of its kind on merchant shipping in Bulgarian waters.

The Togo-flagged ALFA WATAN suffered severe structural damage and sank, while the Palau-flagged ABLE caught fire. Bulgarian Prime Minister Rumen Radev said the vessels were attacked at around 3am by both aerial and maritime drones about 70 nautical miles east of the coastal town of Byala. The Bulgarian government said a search-and-rescue operation was continuing for the crew of the ALFA WATAN, whose fate remained unknown.

All 18 people aboard the ABLE were rescued after abandoning the burning vessel. The Bulgarian-flagged passenger and freight ferry DIOSCURIA was diverted to the area and initially took the crew on board before Bulgarian Navy and Border Police vessels transferred them towards Varna.

The crew comprised 11 Turkish and seven Indian nationals. Two sailors were taken to hospital, including an Indian crew member suffering from burns and the Turkish captain, who sustained a head injury. Bulgarian public broadcaster BNT reported that the remaining 16 sailors subsequently arrived safely in Varna for medical checks.

The ABLE was reportedly carrying grain towards Istanbul. The cargo aboard the ALFA WATAN, which had been heading north towards Romania, has not been officially established.

Radev convened an emergency meeting involving the ministries of defence, interior, transport and environment, alongside the presidency and Bulgaria’s security services. He described the attack as an unacceptable violation of international and maritime law and warned of its effect on commercial navigation in the Black Sea.

Bulgarian authorities have not publicly identified who launched the drones. Investigations are examining both the weapons used and the circumstances surrounding the attack. One rescued Turkish sailor told Bulgarian television that he believed the ABLE had been hit by a Russian underwater drone, but that account has not been independently established and Sofia has made no formal attribution.

Foreign Minister Velislava Petrova said Bulgaria was in contact with its European and NATO partners and described Black Sea security as inseparable from wider European security. She said civilian crews and freedom of navigation must be protected and that Bulgaria would work with its allies to assess the wider consequences for maritime security.

European Commission President Ursula von der Leyen also condemned attacks against civilian shipping, saying the situation in the Black Sea was becoming increasingly concerning. She said commercial vessels and their crews were being targeted as investigations continued into the latest incidents.

Tuesday’s attack came less than 24 hours after another commercial vessel caught fire and sank in Romania’s exclusive economic zone. The Turkish-owned Royad Mammadov, sailing under the flag of Saint Kitts and Nevis, had left the Ukrainian Danube port of Izmail carrying corn for Ravenna in Italy.

Romanian authorities confirmed that two people died and 11 crew members were rescued. President Volodymyr Zelenskyy said the vessel had been struck by two Russian drones, although Romanian authorities did not themselves publicly attribute the incident to Russia.

The two incidents in consecutive days mark a further geographical expansion of the risks facing commercial shipping in the western Black Sea. EU Today has previously reported how strikes near Romania have moved maritime war risks closer to NATO territory, while a separate maritime drone explosion at Constanța raised questions over the ability of coastal states to detect and respond to unmanned systems approaching commercial infrastructure.

The distinction between territorial waters and an exclusive economic zone remains important. The attacks occurred outside Bulgaria’s territorial sea and therefore do not amount simply to an attack on Bulgarian territory. They nevertheless took place in an area where Bulgaria has internationally recognised economic rights and responsibilities, including search-and-rescue and environmental obligations.

The immediate concern for Sofia is the search for the missing crew of the ALFA WATAN and the possibility of pollution from the wreck. The wider concern for the EU is the increasingly exposed position of civilian shipping routes linking Ukraine, Romania, Bulgaria and Turkey.

Ukraine’s maritime export routes remain particularly important for agricultural trade. Repeated attacks on merchant vessels can increase insurance premiums, discourage shipowners from entering the region and raise transport costs even when ports themselves remain operational. Russian attacks on Odesa and its export infrastructure have already placed Ukraine’s Black Sea grain corridor under sustained pressure.

With merchant ships now struck in the economic zones of both Romania and Bulgaria on consecutive days, Black Sea maritime security has moved further onto the agenda of EU and NATO governments along the western coast.

A large fire has broken out at the Volodarskaya petroleum-products station outside Moscow following an extensive overnight drone attack. The facility occupies an important position in the pipeline network supplying petrol, diesel and aviation fuel to the Russian capital and its principal airports.

A major fire was reported at the Volodarskaya linear production and dispatch station in Moscow region early on Tuesday, bringing Ukraine’s campaign against Russian fuel infrastructure to another important point in the capital’s supply network.

Footage published from the area around Konstantinovo showed a substantial blaze at the facility, with reports from local residents that storage tanks were burning. The material identified the site as the Volodarskaya station, operated by Transneft-Upper Volga and connected to the petroleum-products network serving the Moscow region.

The extent of the damage was not immediately clear. There had been no detailed assessment from Transneft by Tuesday morning establishing whether pumping equipment, pipelines or only storage facilities had been affected. This distinction will determine whether the attack produces a temporary disruption or a more significant problem for Moscow’s fuel distribution system.

The strike formed part of a large overnight drone attack on Moscow and surrounding districts. Moscow Mayor Sergei Sobyanin reported repeated interceptions of drones approaching the capital, while air-defence activity continued across Moscow region. Russian aviation authorities temporarily restricted operations at Vnukovo, Domodedovo, Sheremetyevo and Zhukovsky airports for flight-safety reasons.

There is no evidence at this stage that the airport restrictions resulted from fuel shortages. They were imposed during the drone attack itself. The longer-term significance of Volodarskaya lies instead in the station’s role within the pipeline and storage infrastructure serving the Russian capital.

A major link in Moscow’s fuel network

Volodarskaya is connected to Moscow’s ring petroleum-products pipeline, through which petrol, diesel and aviation kerosene can be moved between refineries, storage facilities and major consumers.

Its importance is documented by Transneft itself. In 2024, the company said it had returned a 32-kilometre petroleum-products pipeline between the Moscow refinery and Volodarskaya to operation as part of a project to increase fuel deliveries across Moscow region.

According to the company’s figures, the project allowed aviation-fuel deliveries to Moscow’s airports to rise almost twofold, to as much as three million tonnes a year. Potential diesel deliveries to Moscow region consumers increased to 2.8 million tonnes annually, while petrol volumes reached 1.6 million tonnes. Transneft specifically identified Vnukovo, Domodedovo and Sheremetyevo as airports supplied through the expanded system.

Transneft has also expanded storage at Volodarskaya. The company previously said it had commissioned additional petroleum-product tanks at the station to support fuel supplies to Moscow and aviation-fuel transportation to the capital’s airports.

Those figures do not mean that every litre of fuel consumed by Moscow depends on Volodarskaya. Russia can move petroleum products by rail and road, and the Moscow region has other storage and distribution facilities. But replacing pipeline volumes on the scale handled by the Moscow system would place additional demands on those alternatives, particularly if disruption were prolonged.

The attack also follows repeated Ukrainian strikes against refining infrastructure supplying European Russia. On 20 September, EU Today reported that a mass drone attack had hit the Moscow Oil Refinery at Kapotnya, one of the main fuel-processing plants serving the capital. The strike reportedly affected its ELOU-AVT-6 primary processing unit, increasing pressure on a refinery that had already been targeted earlier in the year.

The broader campaign has moved beyond individual refineries. Ukraine has increasingly targeted different stages of Russia’s energy system, including storage depots, pumping infrastructure, ports and export terminals. Earlier attacks on the Omsk refinery and Baltic export infrastructure illustrated Kyiv’s effort to put pressure on both domestic fuel processing and the logistics through which Russian oil reaches international markets.

That approach is intended to force Russia to repair several parts of the system simultaneously rather than simply compensate for the temporary loss of production at one refinery. EU Today has previously examined how sustained strikes can put physical pressure on Russia’s oil economy where sanctions alone have limits.

President Volodymyr Zelenskyy said on 3 October that Ukraine intended to intensify attacks on Russian oil refineries in response to Moscow’s continuing strikes against Ukrainian cities, while maintaining that Ukrainian operations would not deliberately target civilians.

Volodarskaya adds another element to that campaign. A refinery converts crude oil into usable fuels; a pumping and storage station determines how those products reach consumers. Damaging one without the other may create disruption that can be bypassed. Sustained damage to both processing and distribution infrastructure is more difficult to compensate for.

Much therefore depends on what happened inside Volodarskaya overnight. If the damage is confined to several storage tanks, the Moscow fuel network may be able to absorb the loss. Damage to pumping installations or pipeline connections would have wider consequences, particularly if the facility is attacked repeatedly.

The strike nevertheless demonstrates that a fuel installation closely connected to Moscow’s aviation and transport system can be reached despite the dense air-defence network surrounding the capital. The scale of its effect will become clearer once satellite imagery and operational information show which parts of the Volodarskaya complex were actually damaged.

EU foreign policy chief Kaja Kallas has warned that Russia is intensifying hybrid operations across Europe, citing sabotage attempts, airspace violations and Russian drones and missiles crossing into Moldovan territory.

Her intervention adds pressure for a more coordinated European response to hostile activity below the threshold of conventional warfare.

Russia is putting lives at risk across Europe through an expanding campaign of hybrid activity, EU foreign policy chief Kaja Kallas said on Monday, after another series of Russian drones and missiles entered Moldovan airspace.

Speaking in Brussels alongside Moldovan Prime Minister Vasile Tofan and Enlargement Commissioner Marta Kos, Kallas said Europe had experienced an increase in sabotage attempts and airspace violations during recent weeks.

“Russian missiles and drones violated Moldovan airspace again over the weekend,” she said, describing the incidents as unacceptable.

According to the official EU record of the press conference, Kallas said the Kremlin was seeking to create fear and interfere with European decision-making, and argued that the response should include greater resilience and continued support for Ukraine.

Her remarks follow Russia’s renewed large-scale attacks against Ukraine’s energy system and continued reports of drones crossing borders beyond Ukrainian territory.

Moldova’s defence authorities reported that three drones entered Moldovan airspace during Russia’s 30 September attack on Ukraine. Moldova, which shares a long border with Ukraine and is seeking EU membership, has repeatedly accused Moscow of attempting to destabilise the country.

The latest incidents broaden a European debate that has been developing for months: how governments should respond to hostile operations that are deliberate and potentially dangerous but fall short of an overt military attack.

EU Today reported on 28 September that European governments were discussing an emergency security protocol intended to improve coordination when member states face sabotage and other hybrid threats.

That followed earlier warnings concerning suspected attacks on infrastructure, cyber operations, interference campaigns and airspace violations across several European countries.

The problem is partly one of attribution and partly one of thresholds.

A conventional armed attack on a NATO member may trigger consultation under Article 4 or, in sufficiently serious circumstances, collective defence provisions under Article 5. The European Union also has its own mutual assistance provision under Article 42.7 of the Treaty on European Union.

Hybrid activity is frequently designed to remain below those thresholds.

Cyberattacks, covert sabotage, GPS interference, disinformation, drones and operations conducted through intermediaries can impose costs without giving governments an obvious basis for a military response.

Kallas’s warning comes as Germany has also reported an increase in activity it attributes to Russia.

Chancellor Friedrich Merz has warned that Germany faces growing hybrid pressure involving drones and cyber operations. European security services have separately investigated suspected Russian involvement in sabotage and attacks on infrastructure in several countries.

Moscow has denied Western accusations that it is directing such operations.

The EU has already used sanctions against individuals and entities accused of Russian hybrid activity, while governments are considering faster systems for sharing intelligence and attributing incidents.

EU Today examined the debate in September as the European Parliament considered proposals for quicker attribution, stronger intelligence-sharing and improved protection of critical infrastructure.

Moldova occupies a particularly exposed position.

The EU has provided €317 million through the European Peace Facility for Moldovan defence modernisation, according to Kallas, including €120 million allocated in 2026 for air defence. Brussels is also supporting Moldova through its EU Partnership Mission, which provides assistance against hybrid and cyber threats.

Unlike Ukraine, Moldova is not a NATO member and has constitutional neutrality. Its ability to counter Russian missiles or drones entering its airspace is therefore closely connected to the development of its own detection and air-defence capabilities.

For the EU, repeated incidents involving Moldova, NATO airspace and European infrastructure are increasingly being considered as parts of the same security problem rather than isolated events.