NATO Forces Exposed as Unidentified Drones Breach Six Alliance Member Nations

In two weeks in May 2026, drones entered, crashed into, or drifted across at least six NATO member states. A Ukrainian sea drone carrying explosives washed into a cave in Greece. Russian strike drones hit targets 50 kilometres from Slovakia. Finland scrambled fighter jets twice in 48 hours after reports of unidentified drone sounds. Europe’s air defence system was built around jets and missiles; cheap drones are now exposing a gap that law and doctrine have not caught up with.

What Aurora 26 Proved

The clearest warning came from inside NATO. During Exercise Aurora 26 on Gotland, held from April 27 to May 13 with roughly 18,000 troops from 13 countries, Swedish units were deliberately sent out without counter-drone equipment to test how vulnerable they were. A 24-year-old Ukrainian FPV pilot using the callsign "Tarik" gave the blunt assessment: "They stopped the exercise three times so troops could figure out what to do better, but if this had been real, everyone would be dead" (TV4, Omni).

Sweden’s Supreme Commander Michael Claesson did not soften the message: "All Western armies need to learn very quickly how to conduct operations with drones and against drones, and the fastest way is to listen to the Ukrainians" (United24 Media). US Brigadier General Curtis King said the same thing in fewer words: "We’re not there yet" (AviacionLine).

The lesson went beyond one exercise. NATO ground forces still lack the doctrine, detection systems and trained operators needed to survive in a battlefield where cheap drones are the main killer.

The Legal Wall at the Border

Russian drone strikes on Uzhhorod in western Ukraine on May 13 landed within 50 kilometres of Slovak territory. Slovakia closed all border crossings with Ukraine in response (Topky.sk).

The military problem immediately became a legal one. President Pellegrini called for urgent legislation allowing the Slovak military to shoot down drones in peacetime, which current law does not allow outside a declared state of war (TA3). Romania passed peacetime shoot-down powers in 2025, but that law has not yet been tested. NATO has no common framework.

That matters even beyond NATO. Malta is not in the alliance, but it sits inside the same European security space and on the same Mediterranean routes where military drones, maritime surveillance and contested communications are becoming routine. For small states, the hard question is not only what the armed forces can detect, but who is legally allowed to act before a drone becomes a wreckage problem.

In Finland, a reported drone sound over Lemi, 30 kilometres from the Russian border, triggered a helicopter search on the night of May 17. It came 48 hours after Helsinki-Vantaa airport shut down over a separate drone threat. No drone was found in either case, but the defence ministry confirmed "enhanced surveillance" along the eastern border (Yle).

On May 7, Greek fishermen found an armed Ukrainian Magura-type sea drone in a cave near Lefkada. It was carrying explosives and a Starlink communication system. Defence Minister Dendias publicly identified it as Ukrainian and demanded explanations from Kyiv. Ukraine denied responsibility in public but, according to Sky Greece reporting, acknowledged it through back-channel diplomacy (The Toc, Capital.gr).

The Attribution Risk

The most dangerous point is attribution. Ukrainian Foreign Minister Sybiha has blamed Baltic airspace incursions on "Russian electronic warfare deliberately diverting Ukrainian drones" (RBC Ukraine). The distinction matters. GPS jamming is a proven Russian capability that disrupts wide areas. Deliberately steering drones towards specific NATO sites would be a hostile act against alliance territory.

That distinction determines whether drone incidents remain at NATO Article 4 level, where a member can request consultations, or move closer to Article 5, the collective defence clause. A CEPA simulation in April 2026 found that invoking Article 5 for hybrid drone incidents remained politically unlikely, while Article 4 consultations were viable (CEPA). Latvia’s government has already collapsed over the failure to intercept a drone that struck a fuel depot in Rezekne (Defense News).

Romania and Ukraine are negotiating a bilateral counter-drone shield, including a joint drone factory and the transfer of Ukrainian know-how, with finalisation expected by August (Economica.net). Hungary’s new Tisza government summoned Russia’s ambassador after the Transcarpathian strikes, something the Orbán government had not done in four years (Telex).

These are national fixes, improvised one by one. NATO has not yet produced the counter-drone doctrine or legal framework needed to replace them. While it waits, each member state is writing its own rules for a threat that crosses borders before governments have decided who is allowed to shoot it down.