Information Warfare — 2026-10-20

Bulgaria Issues Arrest Warrants and Lithuania Reports Suspected Russian Sabotage of Starlink Sites Serving Ukraine

BLUFCoordinated attacks on Starlink ground sites across three NATO states signal an expanding sabotage campaign designed around disposable operatives, and it is unlikely that either German suspect is detained by November 30, 2026.

Sofia City Court on Monday authorized European arrest warrants for two German nationals charged in absentia on October 14 with setting fire to Starlink antennas at the Plana teleport facility near Sofia on October 9, BTA reported 1. Prosecutors said three antennas were destroyed, two partly damaged and three otherwise affected, and that the men's whereabouts are unknown 1. Their court-appointed defence lawyers dispute the evidence and plan to appeal 1. Lithuanian Prime Minister Mindaugas Sinkevičius said an early-morning fire at a company holding Starlink equipment was attempted sabotage using flammable liquids and Molotov cocktails, and that authorities suspect Russian involvement 2. Starlink service was not disrupted, UPI reported, and it noted that no one has been charged in the attacks and authorities have cited no evidence against a Russian source 2.

Analysis
The Bulgarian court record, which confirms the suspects' whereabouts are unknown, a car that left for Serbia and no reported sighting since, supports high confidence. It is unlikely that either German suspect is detained in any country by November 30, 2026. The suspects, born in 2007, are teenagers whose identities the defence disputes, so any arrest would face a contested evidentiary basis. Neither Bulgaria's warrants nor Lithuania's accusation establishes a Moscow link, since the Lithuanian claim rests on official statements alone, with no charges or published evidence. Sourcing is broad but thin: one Bulgarian wire anchors the court facts, and two secondary outlets appear to repeat the same Lithuanian statements. Attacks on Starlink sites in Poland, Bulgaria and Lithuania since September suggest a pattern of recruiting disposable operatives, which complicates attribution. The Bulgarian arson may instead be an opportunistic or ideological act by young recruits without state direction. A detention would let prosecutors test the Russia link and shape EU hybrid-threat sanctions, while continued absence leaves operators to harden sites without attribution.
4 sources
  1. Two Germans Charged over Starlink Antenna Arson in Bulgaria, Court Authorises European Arrest Warrants - BTA (Bulgarian News Agency)
  2. Officials: Fire at Lithuania Starlink center was attempted sabotage - UPI
  3. Bulgaria Seeks Arrest of 2 German Nationals Over Arson Attack on Starlink Antennas - Kyiv Post
  4. Lithuania Says Attempted Starlink Arson Was Russia-Linked Sabotage - U.S. News & World Report (Reuters)

View in full brief →

UNCLASSIFIED // OPEN SOURCE