Starlink Sabotage in Europe

A large white satellite dish on a cone-shaped base under a blue sky.
The Raisting satellite earth station in Bavaria (illustrative; not a Starlink site). Photo: Richard Bartz / Wikimedia Commons (CC BY-SA 2.5)

Arsonists have hit two European ground stations that link Starlink's satellites to the internet: in Poland on September 23 and near Sofia, Bulgaria, on October 9–10. Ukraine's armed forces depend on Starlink. Poland says Russian intelligence ordered its attack and has had four people detained in Germany; Bulgaria has not named anyone. This page tracks what is confirmed, who is claiming what, and what evidence would settle it.

Is it Russia? Strength of the attributionUpdated 17 Oct 2026, 5:11 AM ET (09:11 UTC)
LIKELYPoland blames Russia and has four people detained; Bulgaria names no one

Arsonists have hit Starlink ground stations in Poland (September 23) and near Sofia (October 9–10). Polish prosecutors cite “reasonable suspicion” that Russian services ordered the Polish attack, ministers say they have “no doubt,” and four people have been detained in Germany. But no evidence of a Russian link has been published and no charges filed. Bulgaria has confirmed an arson investigation but named no suspect and no state.

UnprovenClaims and accusations only; no official attribution.
LikelyOfficials point to Russia; the evidence is not yet public.
AttributedCharges or court filings name a Russian service, with evidence.
ConfirmedA court finding or independent confirmation.

What would change this rating ↓

starlinksabotage.america2.news

Get America 2.0 in your inbox

Analysis of Russian influence, information warfare and the networks behind them. Free; unsubscribe anytime.

Latest reports

New reporting from major outlets and official sources, listed as it appears. Our monitoring adds headlines from major outlets automatically. "Checked" means our software fetched the full report and confirmed it supports its headline. "Reviewed" means an editor checked it against its source. "Auto" items have not been checked yet. Tap a label for our note. None of this is an endorsement. Our assessment is the rating above.

All 18 sources →

What would change this assessment

The rating measures how well the claim that Russia is behind these attacks is supported by evidence, not how plausible it seems. Any one of these would move it.

  • not seenCharges with evidence: a Polish indictment or court filing that names a Russian service, handler or payment, or details disclosed at the suspects' extradition hearings in Germany.
  • not seenA Bulgarian finding: prosecutors or the State Agency for National Security naming who set the Sofia fire and on whose behalf.
  • not seenA link between the cases: an official statement tying the Polish and Bulgarian attacks to the same network.
  • not seenAllied attribution with evidence: the EU, NATO or another government attributing the attacks and citing intelligence it can describe.
  • not seenA claim or a specific denial from Russia, or from the suspects in court.
  • not seenAnother attack on a Starlink or satellite ground station in Europe.

What is actually known

  • Poland: arson at a Starlink ground station. On the evening of September 23 a fire hit the power system and backup generator at a ground station at Wola Krobowska, south of Warsaw, owned by the state telecom operator Exatel and used to carry Starlink traffic, including to Ukraine. The station kept operating (Al Jazeera, The Local). Two days later Poland's National Prosecutor's Office said the fire “was the result of arson” and that there was “reasonable suspicion that the perpetrators acted on the orders of the Russian special services,” aiming to disrupt Starlink in Poland and other Central and Eastern European countries; at that point no one had been charged (PAP).
  • Four people detained in Germany. On October 12 Prime Minister Donald Tusk announced that two Turkish citizens had been detained in Germany at Poland's request, calling it “another act of hybrid warfare” (Notes from Poland). Poland's police chief said investigators have records of their movements, recordings, fingerprints and DNA (Notes from Poland). A woman and a man were later detained in Berlin; Polish radio reported that the woman may have driven the two men (The Local). The suspects are expected to face charges of sabotage on behalf of a foreign intelligence service (Al Jazeera).
  • Poland's ministers name Russia, but the evidence is not public. “We have no doubt that Russian services are behind this act of sabotage,” said Tomasz Siemoniak, the minister coordinating the special services, adding that Russia increasingly uses “individuals linked to the criminal underworld” (Al Jazeera). No handler, payment or recruitment channel has been published, and no court has ruled.
  • Bulgaria: 11 of 17 antennas burned. An opposition MP revealed that 11 of 17 Starlink antennas at a site near Sofia had been set on fire, by two masked men according to his information. On October 14 Prime Minister Rumen Radev confirmed an arson investigation, “extremely intensive” and run with partner services, and asked the head of the national security agency not to disclose details. Asked why he would not name Russia, he said: “everything is clear to us, but the investigation must be completed” (Sofia Globe).
  • Ukraine warned of exactly this. In early October Ukraine's military intelligence told partners that Russian services planned sabotage in EU and NATO countries and named “Starlink satellite internet receiving stations located in European countries” among potential targets (Liga). A warning of intent, not evidence about either fire.
  • Russia has not answered. The Russian embassy in Warsaw did not reply to Al Jazeera; Moscow has dismissed similar accusations in the past as baseless (Al Jazeera).

Claims in circulation

The most-shared claims, and what public sources can confirm.

Likely, not shown

Poland has proved Russia ordered the attack

Origin. Headlines on October 12–13 after Polish ministers named Russia.

What the evidence shows. Prosecutors cite “reasonable suspicion,” and ministers say they have “no doubt” (Al Jazeera). Police say they hold movement records, recordings, fingerprints and DNA on the suspects (Notes from Poland), but nothing tying them to a Russian service has been published, and no charges have been filed.

Bottom line. An official attribution, not yet a proven one.

Unconfirmed

Two men with German passports were arrested for the Sofia fire

Origin. Bulgarian outlets citing unnamed prosecution sources (Sega).

What the evidence shows. No named official has confirmed any arrest. Radev and the security agency have said only that the investigation is under way (Sofia Globe).

Bottom line. Unconfirmed.

Unconfirmed

The Polish and Bulgarian attacks were carried out by the same network

Origin. Media reports that investigators are examining a possible link.

What the evidence shows. No Polish or Bulgarian official has said the cases are connected.

Bottom line. Possible, not established.

What to watch next

  • Extradition hearings in Germany and formal charges in Poland, which could make the evidence public.
  • The result of Bulgaria's investigation, which Radev says is “expected soon” (Sofia Globe).
  • Any official statement linking the two attacks, or naming a handler or recruitment channel.
  • Further attacks on satellite ground stations, and any statement from SpaceX on how they affect service.

Timeline

  • Sep 23Fire at the Starlink ground station at Wola Krobowska, Poland (The Local).
  • Sep 25Polish prosecutors open a sabotage investigation and cite “reasonable suspicion” of Russian orders (PAP).
  • Early OctUkraine's military intelligence warns that Starlink ground stations in Europe are potential Russian targets (Liga).
  • Oct 9–1011 of 17 Starlink antennas burned at a site near Sofia (Sofia Globe).
  • Oct 12Tusk announces two Turkish citizens detained in Germany; Siemoniak: “no doubt” Russia is behind it (Al Jazeera).
  • Oct 13Two more people detained in Berlin (The Local).
  • Oct 14Radev confirms the Bulgarian arson investigation (Sofia Globe).
  • Oct 16Der Spiegel, citing sources in several countries, reports the two Turkish suspects may belong to, or have been hired by, the Turkish crime gang known as the Daltons, which it says Russian intelligence may have commissioned; a court in Stuttgart will decide on extradition to Poland (Meduza, Euronews).

Key sources