European Authorities Investigate Coordinated Sabotage Against Starlink Ground Terminals

The Three-Question Framework

What Happened?

On October 14, 2026, Bulgarian Prime Minister Rumen Radev and national security agency DANS confirmed an investigation into an October 9 arson attack that destroyed 11 of 17 antennas at a Starlink satellite ground facility near Sofia, coinciding with arrests in Germany linked to a parallel attack near Warsaw.

Why It Matters

Physical ground station attacks represent an escalation in kinetic threats targeting commercial satellite broadband constellations that provide resilient communications for Ukrainian defense and European critical infrastructure.

What Could Happen Next

Bulgaria's Ministry of the Interior announced heightened security protocols around private satellite and telecom hubs, while German and Polish prosecutors coordinate on international sabotage charges.

Executive Key Takeaways

Bulgarian counterintelligence agency DANS confirmed that 11 of 17 antennas at a private Sofia Starlink ground site were intentionally burned.

Two suspects holding German passports were apprehended in Bulgaria after entering from Greece via the Kulata border checkpoint.

The incident directly links to a September 23 attack on a Starlink terminal south of Warsaw and subsequent arrests in Nürtingen, Germany.

Source: In a dispatch broadcast on October 14, 2026, Deutsche Presse-Agentur (dpa) reported statements from Bulgarian government leadership and national security officials regarding attacks on Starlink infrastructure.

The attack on the Sofia terminal was brought to public attention by the Democratic Bulgaria opposition coalition before being formally confirmed by Prime Minister Rumen Radev during parliamentary proceedings. Investigators reported that the facility's antennas were actively routing data used to support Ukrainian network resilience.

Plamen Tonchev, director of the State Agency for National Security (DANS), formally categorized the fire as sabotage and informed members of parliament that additional infrastructure targets across Eastern Europe remain at elevated risk. Bulgarian authorities detained two men aged 20 and 21 in connection with the arson.

The Bulgarian arrests mirror a separate ongoing counter-espionage probe in Germany, where federal police arrested two suspects in Nürtingen near Stuttgart for allegedly torching a Starlink ground installation outside Warsaw on September 23. Polish authorities have formally implicated foreign intelligence services in directing the strikes.

SpaceX has not released technical assessments detailing how much satellite throughput was degraded by the loss of the Sofia dishes or whether traffic was rerouted through nearby orbital gateway stations in Romania and Greece.

The Three-Question Framework

What Happened?

Why It Matters

What Could Happen Next

Executive Key Takeaways

Primary Sources & Citations