Stray Drone Exposes NATO Shelter Gaps

A Romanian F-16 fired an air-to-air missile over southern Estonia around midday on 20 May. The target, a Ukrainian drone pushed into allied airspace by Russian GPS jamming, crashed 30 metres from a farmhouse in Põltsamaa (ERR, Aerotime). No one was hurt. It was NATO's first aerial interception over a Baltic state. The military part worked. The civilian protection around it did not.

Ten Incursions, One Government Down

Since March, at least ten drone incursions have affected four NATO states, at roughly one every five days (Defence News). Ukrainian drones aimed at Russian energy infrastructure near St Petersburg are being thrown off course by electronic warfare. On 7 May, one hit a Latvian oil depot. On 15 May, Finland closed Helsinki airport. On 20 May, Lithuania issued its first mass civil alert, sending the president and parliament into shelters (Euronews).

Latvia has paid the highest political price. Prime Minister Siliņa resigned on 14 May after the defence minister was forced out over the strike on the Rēzekne depot (Washington Post).

Ukraine blamed the deviations on "deliberate" Russian electronic warfare (Ukrainska Pravda). Russia's foreign intelligence service chose a different line, inventing a claim that Latvia was allowing Ukrainian drone launches from its territory and warning that "the coordinates of decision-making centres on Latvian territory are well known" (Atlantic Council). NATO Secretary General Rutte put the cause back on Moscow: the drones cross allied airspace "because of the reckless, illegal full-scale attack of Russia" (Euronews).

Thirty-Five Lost Years of Shelter Neglect

The Põltsamaa drone carried fuel, but no confirmed warhead. Had it carried one, many people nearby would not have known where to go.

Estonia sent mobile alerts during the incident through a warning app launched one day earlier for a military exercise (ERR). Mandatory shelters for new buildings come into force in March 2028. There are no public sirens.

The same weakness runs across Europe. Germany still has 579 functioning shelters from a Cold War stock of 2,000. Berlin has none (Taz). Poland can shelter 3.8 percent of its population (Business Insider Poland). Romania lists 4,538 civil protection shelters, but in Tulcea, a frontline city near the Ukrainian border, not one of ten public facilities works (Adevărul). Only Finland, which kept its Cold War network, can protect most of its urban population.

Governments are now opening the cheque book. Germany approved €10 billion for civil protection on 20 May, its largest such investment since reunification (German Federal Government). Poland has set aside 22.5 billion zloty through its EU Recovery Plan, with major shelter construction due to start in 2027 (Money.pl).

The blockage sits in the EU's legal machinery. Civil protection is a "supporting competence" under Article 196 of the Treaty on the Functioning of the European Union. Brussels can coordinate and help pay, but it cannot order a government to build shelters or install sirens. There is no common alert standard. On 20 May, Lithuania used cell broadcast, Estonia used a pilot app, and Latvia warned only border municipalities. Three NATO allies, three different systems.

What the Missile Cannot Fix

Russia's electronic warfare produces these incidents with deniability built in. GPS jamming blinds a drone's navigation. Spoofing gives it false coordinates. Some diverted drones may then lock autonomously onto the nearest target that matches their visual programming. Whether Moscow actively steers drones into NATO airspace or creates the conditions for them to drift, the danger to civilians is the same.

NATO showed on 20 May that it can shoot down a stray drone. The Romanian pilot had clear skies and visual contact. The next interception may not be so clean. The alliance can now hit the threat in the air. It still cannot guarantee protection for the people underneath. Under current EU law, Brussels cannot force national governments to close that gap.