NATO Forces Short of Defences as Unidentified Drones Breach Six Alliance Members

For two weeks in May 2026, the warning signs came in fragments. A Ukrainian sea drone carrying explosives washed into a cave in Greece. Russian strike drones hit targets 50 kilometres from Slovakia. Finland sent up fighter jets twice in 48 hours after reports of drone activity. Across at least six NATO member states, drones penetrated, crashed into or drifted across allied territory.

The problem is awkwardly simple. Europe’s air defences were built around jets and missiles. Cheap drones have found the gap between military doctrine, detection technology and peacetime law.

What Aurora 26 Proved

The clearest warning came from within NATO itself. During Exercise Aurora 26 on Gotland, held from April 27 to May 13 with roughly 18,000 troops from 13 countries, Swedish units were deliberately sent into the field without counter-drone equipment. The point was to see how exposed they really were.

A 24-year-old Ukrainian FPV pilot using the callsign "Tarik" gave the verdict without ceremony: "They stopped the exercise three times so troops could figure out what to do better, but if this had been real, everyone would be dead" (TV4, Omni).

Sweden's Supreme Commander Michael Claesson was just as direct: "All Western armies need to learn very quickly how to conduct operations with drones and against drones, and the fastest way is to listen to the Ukrainians" (United24 Media). US Brigadier General Curtis King put it more plainly still: "We're not there yet" (AviacionLine).

That exercise mattered more than any single border incident. It showed that NATO ground forces still lack the doctrine, detection systems and trained operators needed for a battlefield where cheap drones are often the main killer.

The Legal Wall at the Border

On May 13, Russian drone strikes on Uzhhorod in western Ukraine landed within 50 kilometres of Slovak territory. Slovakia responded by closing all border crossings with Ukraine (Topky.sk).

The episode exposed a legal weakness as much as a military one. President Pellegrini called for urgent legislation to allow the Slovak military to shoot down drones in peacetime. Under current law, that power does not exist outside a declared state of war (TA3). Many NATO members face the same constraint. Romania gave itself peacetime shoot-down authority in 2025, but that law has not yet been tested, and there is no alliance-wide framework.

Finland has been living with the uncertainty in real time. A reported drone sound over Lemi, 30 kilometres from the Russian border, triggered a helicopter search on the night of May 17. It came just 48 hours after Helsinki-Vantaa airport shut down over a separate drone threat. No drone was found in either case, but the defence ministry confirmed "enhanced surveillance" along the eastern border (Yle).

Then came the incident off Greece. On May 7, fishermen found an armed Ukrainian Magura-type sea drone in a cave near Lefkada. It was carrying explosives and a Starlink communication system. Defence Minister Dendias publicly identified it as Ukrainian and demanded explanations from Kyiv. Ukraine denied responsibility in public but, according to Sky Greece reporting, acknowledged it through back-channel diplomacy (The Toc, Capital.gr).

The Attribution Risk

The most dangerous part is not always the drone itself. It is deciding whose drone it is, how it got there and what that means.

Ukrainian Foreign Minister Sybiha has attributed Baltic airspace incursions to "Russian electronic warfare deliberately diverting Ukrainian drones" (RBC Ukraine). The distinction matters. GPS jamming is a proven Russian capability and can cause disruption across a wide area. Deliberately steering drones towards specific NATO sites would be something else: a hostile act against Alliance territory.

That judgement determines whether incidents remain at NATO Article 4 level, where any member can request consultations, or move closer to Article 5, the collective defence clause. A CEPA simulation in April 2026 concluded that invoking Article 5 remained politically unlikely for hybrid drone incidents, but that Article 4 consultations were viable (CEPA). Latvia has already paid a political price. Its government collapsed after the failure to intercept a drone that struck a fuel depot in Rezekne (Defense News).

Romania and Ukraine are now negotiating a bilateral counter-drone shield. The package includes a joint drone factory and the transfer of Ukrainian know-how, with finalisation expected by August (Economica.net). Hungary's new Tisza government summoned Russia's ambassador after the Transcarpathian strikes, a step the Orbán government never took in four years (Telex).

For Ireland, outside NATO but inside the European security conversation, the lesson is hard to dodge. The threat is moving faster than the rules written to manage it. NATO members are improvising country by country, through emergency laws, bilateral deals and ad hoc surveillance. The drones are not waiting for an alliance-level doctrine to catch up.