Russian drone campaign exposes NATO air defence gaps across Europe

A quadcopter drone carrying plastic explosives slipped past air defence installations at Leipzig/Halle Airport on 4 August, struck a Ukrainian cargo plane on the tarmac, and lay undiscovered for four hours until a bus driver stepped on it and alerted security. The device failed to detonate. German investigators later matched DNA on the drone to traces from a firebomb mailed to the same airport in July 2024 that had set a freight container ablaze. The interior minister, Alexander Dobrindt, called the episode a "new level of danger" for Germany but stopped short of accusing Russia, adhering to Berlin's long-standing habit of rhetorical restraint toward Moscow.

A pattern, not an isolated event

The Leipzig incursion is the most conspicuous of a campaign that, according to the International Institute for Strategic Studies (IISS), has targeted a dozen NATO members and Ireland since 2024. Russian drones have forced airport shutdowns, disrupted logistics, and penetrated the perimeters of nuclear facilities and defence installations hosting advanced US weapons and French submarines. The IISS judges that Moscow most likely uses its "shadow fleet" of oil tankers, vessels that move Russian crude through European waters with minimal oversight, as launch and recovery platforms for these operations. The campaign accelerated after a coordinated expulsion of alleged Russian intelligence officers from embassies across Europe.

United States intelligence agencies reportedly assessed that the Leipzig drone was Russian in origin and that its explosives bore the hallmarks of a military manufacturer. The Wall Street Journal reported that the failed attack was designed to test NATO's collective defensive resolve. Lithuania's defence minister, Robertas Kaunaus, went further on 7 August, alleging that the Kremlin is preparing a false-flag strike on critical infrastructure in the Baltic region using captured Ukrainian drones to frame Kyiv. Poland and the Baltic states have since tightened security around energy sites and logistical hubs, though Kaunaus said the threat was not immediate.

The GRU's fingerprints

Nikolay Mitrokhin, a researcher at Bremen University who tracks Russian intelligence operations, identifies the Main Intelligence Directorate, the GRU, as the most likely orchestrator. The GRU has run global cyber-espionage campaigns and attempted to disrupt military and maritime logistics in Europe. Mitrokhin judges the Leipzig operation's execution "not bad" from a Russian military standpoint: it succeeded in troubling Europe and exposing systemic weaknesses. He concludes that European systems for identifying and intercepting drones are outdated by at least five years, a gap widened by the rapid evolution of drone warfare in Ukraine.

Andrey Pronin, who runs a Kyiv-based school for drone pilots, dismisses the reconnaissance value of these flights. "What is the sense of flying over there when everything is already known?" he said. "It makes sense when you hit a site and then want to check whether you strike it or not." In his view, the flights are calibrated to provoke a political reaction, or the lack of one. "It's more like a test of responsiveness. Will there be 'concerns' or 'serious concerns'?" he added mockingly, referencing the standard lexicon of European diplomatic statements.

Air defence built for a different war

Europe's air defence architecture was designed to detect and defeat crewed aircraft and ballistic missiles. Drones present a different problem: they fly low, slow, and cheap. Detecting them, attributing them to a state actor, and obtaining political authorisation to intercept consumes time that fast-moving incidents do not allow. Using fighter jets and surface-to-air missiles to destroy a drone costing a few thousand euros is both ineffective and ruinously expensive. No NATO member currently fields swarms of dedicated drone interceptors. The Western military-industrial complex, accustomed to long procurement cycles for high-end platforms, has not adapted to the mass, low-cost threat demonstrated daily over Ukraine.

The IISS describes the campaign as "a series of tactical successes for the Kremlin and a strategic failure of allied air defence." It also notes that the operation has "exposed political fractures" within NATO, exploiting the gap between what European militaries could do technically and what their governments are prepared to authorise. Lieutenant General Ihor Romanenko, former deputy head of Ukraine's General Staff and an air defence specialist for decades, put it bluntly: "Putin tests NATO and shows [member states] how weak they are."

The Polish stress test

The most extensive single incursion occurred on 10 September 2025, when almost two dozen Russian drones entered Polish airspace. Warsaw halted flights at four airports. Only two drones were shot down. On the same day, Ukrainian air defences destroyed 500 Russian drones over Ukraine. "It would have been funny had it not been so sad," Romanenko said. "Russians carried out all their tasks while NATO was only waking up." He characterised Poland's subsequent response as an "ostrich position": officials said they had drawn conclusions but implemented nothing.

The attribution trap

Germany's refusal to name Russia publicly, even after its own interior minister acknowledged the professional nature of the threat, illustrates a broader European dilemma. Attribution requires intelligence certainty that can be shared with allies and withstand legal scrutiny. But the standard of proof demanded by chancelleries and foreign ministries is higher than the operational reality allows. Russia exploits this gap, dismissing all allegations as "scare stories." The result is a cycle of incident, vague statement, and inaction that the GRU appears to have calibrated precisely.

Mitrokhin argues that the Leipzig operation's success lies not in physical damage, the drone failed to explode, but in the psychological and political effect. "There's too few of [counter-drone systems], and they operate too slowly," he said. Pronin advocates a simpler doctrine: "any unknown flying objects should be destroyed." That prescription, however, collides with civil aviation safety rules, rules of engagement, and the risk of shooting down a stray commercial or hobbyist drone. No European government has accepted that risk.

Procurement lag and doctrine drift

The war in Ukraine has made drone warfare cheaper, more lethal, and ubiquitous. Drones have largely replaced conventional artillery, fighter jets and sniper rifles on the front line. Yet NATO's industrial base still produces interceptors priced for a different era. European defence ministries have launched counter-drone programmes, Germany's NNbS, France's MADD, Poland's Narew, but fielded systems remain scarce. The alliance's 2023 Vilnius summit acknowledged the threat, but capability development runs on a five-to-seven-year cycle. The GRU's campaign operates on a weekly cycle.

Romanenko's assessment is unsparing: "They all live with old NATO doctrines that no longer work. Europe is not ready for a war. They're preparing, trying, but they're not ready." The gap is not merely technical. It is organisational, who decides to fire, and legal, under what authority. Until those questions are resolved, every incursion is a free training exercise for Russian operators.

The Baltic flashpoint

Kaunaus's warning of a false-flag operation in the Baltic region adds a new dimension. If Russia stages an attack on critical infrastructure, an undersea cable, a gas terminal, a nuclear plant, using captured Ukrainian drones, the political fallout could fracture NATO unity. The Baltic states and Poland have hardened physical security, but the attribution problem remains. A fabricated Ukrainian strike would force allies to choose between believing forensic evidence and maintaining cohesion. The Kremlin has already demonstrated it can insert drones into NATO airspace at will. The next step may be to weaponise the alliance's own hesitation.

The drone that landed at Leipzig did not explode. The next one might. The question is not whether European air defence will adapt, but whether it will adapt before a successful strike forces the issue. For now, the GRU continues its calibration flights, measuring response times, mapping gaps, and recording the vocabulary of European concern.