Full Report
Bulgarian Prime Minister Rumen Radev called the attacks "absolutely unacceptable" and said Bulgaria had informed its permanent representatives to NATO and the European Union.
Analysis Summary
# Incident Report: Kinetic Drone Strikes on Commercial Shipping in Bulgarian EEZ
## Executive Summary
On October 13, 2026, two commercial vessels were targeted by aerial drone strikes in the Black Sea near the Bulgarian coast, resulting in one vessel sinking and the other sustaining damage. The attacks led to 16 crew members being affected, with five requiring medical assistance and one rescued from a sunken vessel. While no formal attribution has been finalized, Bulgarian officials indicated the strikes align with the strategic interests of the Russian Federation amid the ongoing regional conflict.
## Incident Details
- **Discovery Date:** October 13, 2026
- **Incident Date:** Overnight, October 13, 2026
- **Affected Organizations:** Chelsea 3 (Ukrainian-owned/Maltese-flagged); Unnamed second vessel
- **Sector:** Maritime Transport / International Shipping
- **Geography:** 17-18 nautical miles east of Byala and Krapets, Bulgaria (Black Sea)
## Timeline of Events
### Initial Access
- **Date/Time:** Overnight, October 13, 2026
- **Vector:** Aerial Kinetic Strike
- **Details:** Three aerial drones struck the *Chelsea 3*. A separate strike targeted a second vessel near Krapets.
### Lateral Movement
- *Not applicable (Kinetic incident).*
### Data Exfiltration/Impact
- **Chelsea 3:** Sustained damage from three drone impacts; 15 crew members evacuated.
- **Second Vessel:** Struck 17 nautical miles east of Krapets; vessel sank.
### Detection & Response
- **Discovery:** Immediate detection via impact and distress signals overnight.
- **Response Actions:** Bulgarian rescuers evacuated 15 crew to the port of Varna. An emergency meeting of the Security Council was held by the Bulgarian Prime Minister.
## Attack Methodology
- **Initial Access:** Direct aerial drone strikes against civilian maritime targets.
- **Persistence:** N/A
- **Privilege Escalation:** N/A
- **Defense Evasion:** Use of low-profile aerial drones in maritime corridors.
- **Credential Access:** N/A
- **Discovery:** Use of maritime surveillance or reconnaissance drones to locate civilian merchant ships.
- **Lateral Movement:** N/A
- **Collection:** N/A
- **Exfiltration:** N/A
- **Impact:** Physical destruction of vessels and endangerment of civilian life (one vessel sunk, one damaged).
## Impact Assessment
- **Financial:** Total loss of one vessel; repair costs for the *Chelsea 3*; disruption to Black Sea trade routes.
- **Data Breach:** N/A.
- **Operational:** Disruption of grain/cargo corridors; heightening of maritime insurance risks.
- **Reputational:** International condemnation of the safety of Bulgarian and international waters.
## Indicators of Compromise
- **Physical Indicators:** Debris from three aerial drones (unspecified type).
- **Geographic Indicators:** Attacks concentrated 17-18 nautical miles off the Bulgarian coast.
- **Behavioral Indicators:** Targeting of civilian-flagged merchant vessels in established maritime corridors.
## Response Actions
- **Containment:** Evacuation of crew members to the port of Varna.
- **Eradication:** N/A (Kinetic strikes were discrete events).
- **Recovery:** Bulgarian Security Council convened to discuss strengthening maritime and air surveillance.
- **Diplomatic:** Summoning of the Russian Ambassador; briefing of NATO and EU permanent representatives.
## Lessons Learned
- **Surveillance Gaps:** Existing maritime domain awareness in the Bulgarian Exclusive Economic Zone (EEZ) was insufficient to intercept low-altitude drones.
- **Civilian Risk:** The Black Sea maritime corridor remains highly volatile despite civilian flagging and non-military cargo status.
- **Regional Escalation:** Conflict spillover into NATO-adjacent waters is a persistent threat.
## Recommendations
- **Enhanced Surveillance:** Request and deploy additional NATO/EU maritime and air surveillance assets to the Black Sea coast.
- **Convoy Security:** Explore the feasibility of protected corridors or electronic warfare (EW) shielding for commercial vessels.
- **Early Warning Systems:** Implement a real-time drone sighting alert system for commercial ships operating in the Black Sea.