# REPORT: Drones Sow Chaos Along NATO's Baltic and Finnish Borders


- Author: Maxime Marquette
- Publisher: MadMax (https://mad-max.co)
- Section: Reportage
- Published: 2026-07-28
- Canonical URL: https://mad-max.co/en/article/drones-sow-chaos-along-nato-s-baltic-and-finnish-borders

## Key takeaways

- March 25: according to Reuters, two stray Ukrainian drones entered Estonia and Latvia via Russia; one hit a smokestack at the Auvere power plant and the other crashed in Latvia.
- March 29-30: Finland reported a suspected violation, deployed F/A-18 jets, and identified one object as a Ukrainian AN-196 drone.
- May 7: Latvia and Lithuania asked NATO to reinforce air defenses after drones crashed in Latvia, one exploding at an oil storage facility in Rezekne.
- May 10: Latvian defense minister Andris Spruds resigned after Prime Minister Evika Silina said anti-drone systems were not deployed fast enough.
- July 26: according to Al Jazeera, Romania shot down three drones in three days and summoned the Russian ambassador.

## Finland closes its sky on July 28

### Airspace shut by caution, not by a confirmed attack

According to **Reuters**, on **July 28, 2026**, **Finland** closed a section of its airspace and restricted maritime traffic off its southern coast, near the Russian border, citing the risk of stray **drones**. **This is not a reaction to a confirmed attack**: it is a preventive measure, taken against a risk judged serious enough to justify a partial closure of national airspace.

*Closing a sky over a risk, not a fait accompli, says something about the real alert level.* **This move fits** within a longer sequence of **drones** crossing **NATO**'s northern borders since the start of the year, according to the same sources.

### A spillover concern documented for months

According to Reuters, **military drones** entering the airspace of **Finland**, **Estonia**, **Latvia** and **Lithuania** are fueling concerns about a **spillover of the war in Ukraine** into **NATO**'s northern borders. **Four separate countries**, one shared concern: the war unfolding in **Ukraine** is not staying contained within its official borders.

## March 25: two stray Ukrainian drones enter Estonia and Latvia

### A smokestack hit, a drone crashes

According to Reuters, on **March 25**, two stray Ukrainian military **drones** entered **Estonia** and **Latvia** via Russia; one struck a **smokestack at the Auvere power plant** and the other crashed in Latvia. **This first documented incident** in the sequence establishes a central fact from the start: the **drones** involved apparently did not target these countries, but reached them after crossing Russian territory.

### What "stray" implies, and what it doesn't rule out

**Calling a drone "stray"** suggests a technical or navigation failure rather than deliberate hostile intent toward Finland, Estonia, Latvia or Lithuania. **But none of the sources reviewed** fully rule out other explanations, such as electronic jamming that diverted the **drone**'s trajectory from its intended path over Ukrainian or Russian territory. Interference of this kind is difficult to distinguish from ordinary mechanical failure once a drone has already crashed, which leaves the underlying cause of any single incident genuinely open even when the broader pattern looks consistent across cases.

## March 29-30: Finland deploys F/A-18s

### A suspected violation mobilizes fighter jets

According to Reuters, on **March 29-30**, Finland reported a **suspected territorial violation** by unmanned aerial vehicles in the country's southeast and deployed **F/A-18 jets**; one flying object was identified as a **Ukrainian AN-196 drone**. **Deploying fighter jets** against a **drone**, rather than a manned aircraft, illustrates the level of seriousness with which Finland now treats every unidentified aerial incursion near its eastern border.

### A precedent that sets up July's airspace closure

*A country that sends fighter jets after a drone in March rarely closes its sky out of excess caution.* **This March reaction** establishes a precedent of vigilance that makes Finland's decision, four months later, to preemptively close a portion of its airspace more understandable.

## May 7: Latvia and Lithuania ask NATO to reinforce defenses

### An oil facility hit at Rezekne

According to Reuters, on **May 7**, **Latvia** and **Lithuania** asked **NATO** to reinforce air defenses after two suspected stray **drones** crossed the border from Russia and crashed in Latvia; one exploded at an **oil storage facility in Rezekne**. **An explosion at an energy facility**, even unintentional under the stray-**drone** hypothesis, immediately turns an aerial incident into a critical infrastructure security matter. *Fuel storage doesn't care whether the drone that hit it meant to.*

### A joint request that goes beyond one country

**The fact that two countries**, Latvia and Lithuania, made this request to **NATO** together signals a shared concern, not an isolated case a single government would try to handle alone. **This joint approach** reinforces the reading of a regional phenomenon rather than a series of isolated, unrelated incidents. *Two countries asking together tell a different story than one worrying alone.*

## May 10: a Latvian defense minister resigns

### Andris Spruds steps down after a prime minister's criticism

According to Reuters, on **May 10**, **Andris Spruds** resigned as Latvian defense minister after Prime Minister **Evika Silina** said anti-**drone** systems had not been deployed fast enough. **This resignation** constitutes the first direct, named political consequence of the **drone** sequence documented since March: a ministerial post lost, explicitly attributed to a failure of responsiveness in the face of the threat. *A slow response can cost more than a drone ever does.*

### What this resignation reveals about internal tensions

*A minister resigning over a slow deployment turns a technical problem into a governance crisis.* **Prime Minister Silina's public criticism** of her own defense minister shows how much managing these incursions has become a matter of governmental credibility, not merely a technical air-defense question.

## July 26: Romania shoots down a third drone in three days

### A Russian ambassador summoned in Bucharest

According to **Al Jazeera**, **Romania** said it shot down **three drones in three days** and summoned the **Russian ambassador** after **"repeated violations"** of its airspace. **This third country**, distinct from Finland, Estonia, Latvia and Lithuania, widens the geography of the phenomenon further: this is no longer only a Baltic-Finnish matter, but a pattern also affecting **NATO**'s southeastern flank.

### A more direct diplomatic response than the Baltic states'

**Summoning an ambassador** is a more direct diplomatic gesture than the reinforcement requests Latvia and Lithuania made to **NATO** in May. **This difference in tone** could reflect either a divergence in how governments assess the **drones**' origin, or simply a difference in diplomatic style in response to the same category of threat.

## July 28: Finland's closure provisionally caps the sequence

### Five months of incidents before this decision

**Placed within the full timeline**, Finland's July **28** closure appears as the culmination, not the starting point, of a sequence that began March **25** with the first two stray **drones** in Estonia and Latvia. **Five months of documented incidents** precede this airspace closure, which makes it less surprising than it might appear in isolation.

### What this timeline changes about reading the event

*A preventive move after five months of incidents is not a disproportionate reaction; it's an accumulation reaching its threshold.* **Understanding this chronology** avoids treating the July **28** closure as an isolated, disproportionate event, when it in fact fits within a gradual, documented escalation since spring.

## What Finland won't confirm publicly

### "Operational information," the phrase that limits transparency

**According to Reuters**, Finland said it could not comment on the precise origin of the risk behind the July **28** closure, calling it "**operational information**." **This official reticence** contrasts with the more direct attribution Reuters itself made to stray Ukrainian **drones** for the March and May incidents, introducing uncertainty about the exact source of the risk behind the July closure.

### An implicit contradiction worth naming

**Reuters attributes several earlier incidents** to stray Ukrainian **drones**, while Finland declines to comment on the July risk's origin, citing operational confidentiality. **This gap** should not be smoothed over: it signals that the precise source of the July **28** risk remains, at this stage, unconfirmed publicly by Finnish authorities themselves.

## The origin question no one fully settles

### Stray from Ukraine, or something else?

**For the March and May incidents**, Reuters consistently attributes the origin to Ukrainian **drones** that deviated from their intended path over Russian territory. **No source reviewed** reports an official account explicitly disputing this version for these specific episodes, which sets their status apart from the more uncertain Finnish incident of July **28**. *A repeated attribution for five cases doesn't guarantee automatic confirmation for a sixth.*

### Why caution remains warranted despite the repetition

**Treating each new incident** as automatically identical to the previous ones would be a methodological error: each **drone** deserves its own attribution, based on the evidence available about it specifically, not on a statistical pattern inferred from earlier cases. *Every drone deserves its own inquiry, not a verdict inherited from the last one.*

## A governance crisis as much as a military one

### Every intrusion triggers a civil-military balancing act

**What this whole sequence documents**, beyond the purely military risk, is a border governance crisis: every **drone** intrusion triggers emergency measures, arbitration between civilian and military authorities, and political tremors in **NATO**'s border states. **Andris Spruds's resignation** illustrates this dimension directly: a technical aerial incident turned into a named, sanctioned question of political accountability. *A sky pierced once can cost a post; pierced five times, it costs a career.*

### A test of coordination across multiple decision levels

**Closing an airspace**, as Finland did on July **28**, requires coordination between civil aviation authorities, armed forces and government, often within a very short window. **Each incident in this sequence** tests, in practice, the ability of these different levels to act in concert under pressure, though no source documents a coordination failure for the July **28** episode specifically.

## What the Finnish F/A-18 deployment reveals about doctrine

### A military response to an object not identified as hostile

**Deploying F/A-18 fighter jets** in March, against an object ultimately identified as a stray Ukrainian **drone** rather than a deliberate threat, illustrates a doctrine of maximum precaution: treating every unidentified aerial incursion as potentially hostile until proven otherwise, rather than waiting for confirmation before reacting.

### The operational cost of this caution

**None of the sources reviewed** specify the financial or operational cost of these repeated fighter jet deployments against **drones** that later turn out not to be deliberate threats. **This documentary gap** limits a full assessment of the price paid by Finnish air forces to maintain this precautionary doctrine over several consecutive months.

## The regional echo: Romania widens the geographic scope

### From north to southeast, a shared border vulnerability

**Romania's entry** into this timeline, with three **drones** shot down in three days in late July, shows that vulnerability to **drone** incursions is not limited to the Russian-Baltic-Finnish border. **NATO's southeastern flank**, bordering the Black Sea and close to the Ukrainian theater via a different geographic route, presents comparable exposure, documented by a source distinct from those covering the Baltic and Finnish incidents.

### A different method: shooting down rather than noting a crash

**Unlike the Baltic and Finnish cases**, where **drones** crashed or were identified after the fact, Romania chose to actively shoot down the three **drones** mentioned by Al Jazeera. **This difference in method** could reflect a more proactive engagement doctrine, or simply different tactical circumstances that don't allow a direct comparison between the two approaches without additional data. *Shooting down isn't the same response as noting a crash after the fact.*

## What NATO officially documents about its eastern flank

### A military presence already reinforced before this sequence

According to an official **NATO** page, the Alliance has reinforced its military presence in the east for several years, as part of a deterrence and defense posture documented independently of the **2026 drone** sequence. **This earlier presence** forms the structural framework within which the incidents documented since March take place, though sources don't allow establishing a direct causal link between the earlier reinforcement and the frequency of recent incursions.

### What the French version of NATO's page confirms without adding

**The French-language version** of this same official **NATO** page, titled "L'**OTAN** renforce son flanc oriental," repeats equivalent information without additional detail specific to the **2026 drone** incidents, suggesting this page serves as a general-context resource rather than a direct response document to the sequence documented here.

## The documentary limits that must be named before concluding

### No consolidated human or material toll

**None of the sources reviewed** provide a consolidated tally of material or human damage caused by this entire **drone** sequence since March. **The Auvere power plant smokestack** struck and the **Rezekne oil facility** damaged are the only two material damages explicitly documented by the gathered sources; no human casualties are mentioned in these same sources. *Two pieces of infrastructure hit, zero lives lost according to the sources: a toll that remains, for now, material.*

### A sequence that remains, to date, unresolved

*Five months of documented incidents don't guarantee the sixth month will be calmer.* **Nothing in the available sources** allows the claim that Finland's July **28** closure marks the end of this sequence rather than a new stage in an escalation that could continue in the following months.

### What commercial airlines have had to absorb

**None of the sources reviewed** detail the concrete impact of these repeated airspace closures on civilian commercial traffic in the Baltic and Finnish region. **A closure, even partial and temporary**, nonetheless forces airlines to reroute flights, with fuel and delay costs that none of the sources gathered here quantify precisely. **This additional documentary gap** shows how much media coverage of this sequence remains focused on the military and diplomatic dimension, at the expense of the broader economic consequences affecting travelers and businesses with no direct link to defense.

### Comparison with other air-tension zones around the world

**Other regions of the world** have experienced repeated airspace closures tied to prolonged military tensions in the past, though the sources gathered for this piece don't allow a direct numerical comparison with the current Baltic and Finnish situation. **What nonetheless sets this dossier apart** is the specific and rather unusual combination of an active neighboring armed conflict, direct land borders shared with the power involved in that very conflict, and simultaneous membership in a military alliance built around a collective defense clause, which together raise the political stakes of every single incident well beyond its purely aeronautical dimension.

### How electronic warfare complicates every attribution

**None of the sources reviewed** rule out the possibility that some of these drones were affected by electronic warfare measures active along the front line in Ukraine and along the Russian border more broadly, rather than by simple mechanical or navigational failure. **GPS jamming and spoofing** are documented phenomena in this conflict zone, and their presence would complicate any attempt to cleanly separate "stray due to malfunction" from "stray due to external interference," a distinction none of the sources gathered here draws explicitly for any single incident in this sequence.

### Why this technical uncertainty matters politically

*A drone diverted by jamming and one that simply broke down tell very different political stories.* **If jamming were confirmed** as a contributing factor in any of these six incidents, it would shift the conversation from an unfortunate byproduct of a neighboring war toward a question of whether electronic warfare activity itself is spilling across NATO's borders, a claim no source reviewed for this piece makes explicitly. That single unmade claim marks the boundary between what this dossier can responsibly report and what it can only flag as a question worth continued attention from outlets with deeper technical access than the sources gathered here.

## Conclusion: a border learning to manage uncertainty in real time

**What this five-month sequence establishes with certainty** is that between March **25** and July **28, 2026**, at least five **NATO** countries — Finland, Estonia, Latvia, Lithuania and Romania confirmed by the sources, with heightened vigilance documented in each — had to manage **drone** incursions whose exact origin is confirmed with certainty for only part of the cases. **A minister resigned, an oil site was hit, a power plant was struck, a national airspace was closed.** These are not isolated incidents: an entire border is learning, month after month, to manage an uncertainty that shows no sign of disappearing.

**One question remains** that this piece does not resolve and no source allows us to resolve: does this sequence represent an unintentional spillover from a neighboring conflict, or the gradual testing of a border by an actor watching, incident after incident, how far **NATO** can be pushed without triggering a broader collective response? *A border that closes out of caution hasn't yet chosen between these two answers.*

The coming months will show whether a sixth or seventh country joins this list, whether an incident finally causes a documented human loss, or whether the sequence fades out without ever delivering a clear answer about its exact origin. None of the sources gathered and verified here allow that question to be settled clearly and definitively in either direction on this precise and sensitive point. What can be said with confidence, in the meantime, is that every government along this border has learned to treat an unidentified object in its airspace as a governance test first and a technical curiosity second, and that particular lesson will likely outlast whichever specific explanation eventually proves correct for any single drone counted within this sequence.

**By Maxime Marquette, columnist**

## Columnist's transparency note

### Editorial stance

I am not a journalist but a **columnist and analyst**. My expertise lies in observing and analysing the geopolitical, economic and strategic dynamics that shape our world. My work is to take political strategies apart, to understand global economic movements, to put the decisions of international actors in context and to offer analytical perspectives on the changes that are redefining our societies.

I do not claim the cold objectivity of traditional journalism, which stops at reporting facts. **I claim analytical clarity**, rigorous interpretation and a deep understanding of the complex issues that concern us all. My role is to give meaning to the facts, to place them in their historical and strategic context, and to offer a critical reading of events.

### Method and sources

This text keeps the basic distinction between **verified facts and interpretive analysis**. The rule never changes: a factual claim is published only when a verifiable source supports it, and the sources this article actually used are listed under **Sources**, never here.

**Primary source families** used by the publication, when the story has them: official statements from governments and international institutions, public statements by political leaders, reports from intergovernmental organisations, dispatches from recognised international news agencies.

**Secondary source families**: specialised publications, internationally recognised news media, analyses from established research institutions, reports from industry organisations.

When an article cites statistical, economic or geopolitical data, it comes from the institutions that produce it (intergovernmental organisations, central banks, national statistics offices), and the exact institution is named under **Sources**.

### Nature of the analysis

The analyses, interpretations and perspectives in the analytical sections of this article are a **critical, contextual synthesis** based on the information available, the trends observed and the expert comments cited in the sources consulted.

My role is to interpret these facts, to set them in the context of today's geopolitical and economic dynamics, and to give them a coherent meaning within the larger story of the changes shaping our time. These analyses reflect expertise built through continuous observation of international affairs and an understanding of the strategic mechanisms that drive global actors.

This article describes a documented state of affairs on its publication date, not a prediction: later developments may shift its outlook. No update is promised in advance; when an article is corrected or completed, the change is dated in the text.

## Sources

### Sources primaires et officielles

- [NATO — NATO's military presence in the east of the Alliance](https://www.nato.int/en/what-we-do/deterrence-and-defence/strengthening-natos-eastern-flank)

- [NATO — L'OTAN renforce son flanc oriental](https://www.nato.int/fr/what-we-do/deterrence-and-defence/strengthening-natos-eastern-flank)

- [NATO — Address (transcript, October 2025)](https://www.nato.int/en/news-and-events/events/transcripts/2025/10/13/address)

### Sources secondaires

- [Reuters — Drone incursions sow fear, chaos along NATO's Baltic and Finnish borders](https://www.reuters.com/business/aerospace-defense/drone-incursions-sow-fear-chaos-along-natos-baltic-finnish-borders-2026-07-28/)

- [Reuters — Finland closes airspace, restricts maritime traffic near Russia over drone risk](https://www.reuters.com/world/finland-closes-southern-airspace-near-russia-over-drone-risk-2026-07-28/)

- [Al Jazeera — Romania summons Russian envoy as it shoots down third intruding drone](https://www.aljazeera.com/news/2026/7/26/romania-summons-russian-envoy-as-it-shoots-down-third-intruding-drone)

- [Le Figaro — La défense aérienne de l'OTAN à l'épreuve des incursions de drones](https://www.lefigaro.fr/international/la-defense-aerienne-de-l-otan-a-l-epreuve-des-incursions-de-drones-20260612)

- [Le Monde — Dans l'immensité des forêts marécageuses de Finlande, les troupes de l'OTAN s'entraînent à contrer les incursions](https://www.lemonde.fr/international/article/2026/05/31/dans-l-immensite-des-forets-marecageuses-de-finlande-a-50-kilometres-de-la-frontiere-avec-la-russie-les-troupes-de-l-otan-s-entrainent-a-contrer-les-incursions_6695543_3210.html)

---

Source: Maxime Marquette, MadMax. When citing, name the author and link https://mad-max.co/en/article/drones-sow-chaos-along-nato-s-baltic-and-finnish-borders