24 July–15 September 2026 · Dobrogea, Buzău, Danube Delta, Vaslui, Botoșani, Suceava
Three drones downed in three days by Romanian F-16s opened the series. A Spanish F-18 downed the fourth on 16 August. Meanwhile, the onboard gun and EOD teams showed the response can take different forms. Fully justifying each decision from public data remains impossible.
Updated: 15 September 2026 · Next revision: on identification of the object found at Ciușlea, the expertise on the Plauru debris, clarification of the remaining Olimp fragment, publication of the munitions used, identification of the Viișoara drone's provenance, or a new MApN tally
MApN statements confirm the times, areas and neutralisations. The targets' identity — except for a preliminary assessment in the first case — and the munitions used remain unpublished.
The idea to keep: an expensive missile can be the right choice. Sustainability depends on stockpiles, alternatives and resupply time — data Romania does not publish enough of.
What happened
Until 24 July, the public tally was dominated by alerts, pursuits and fragments. The three engagements show an observable shift in response. The exact cause may be legal, doctrinal, technical, operational and political at once; public data does not allow separating them.
Law 73/2025 extends control measures to unmanned systems and defines destructive fire. MApN leads airspace control, in cooperation with national institutions and, under the law, with NATO structures.
The expertise confirms a Russian Geran-2 with an explosive warhead of about 30 kg TNT equivalent. It had been identified at 01:46, still over Ukraine, about 19 km from the border, then struck the roof of an apartment block. The case shows the decisive limit: over a city, neutralisation can transfer the risk to the people on the ground.[1]
MApN announces the operationalisation and integration of the American Merops system, after testing and validation. The statement does not publish the number of systems, their disposition, the interceptor stockpile or the covered area.
The first target is tracked from Sulina to Buzău and downed over an uninhabited area. The second is neutralised near the border, also in an unpopulated area. The third is downed over the sea. The statements stress the safe conditions; geometry's exact role in each decision remains an inference.
Naval Forces EOD divers destroyed in a controlled way two Gerbera-type unmanned aerial systems found adrift in Romania's exclusive economic zone. MApN describes them as possibly carrying an explosive payload and notes that the Ukrainian side denied they belonged to its forces. The intervention removes a hazard found at sea and remains distinct from interception in flight.[9]
A drone enters national airspace from the Republic of Moldova, north of Galați. A Spanish F-18 on air policing duty obtains engagement authorisation and downs it at 05:01. Search teams later find the fragments of the drone and of the interceptor missile; the munition type is not public.[10][11]
A Romanian F-16 hits a small maritime drone with its onboard gun in the exclusive economic zone, near the Neptun Alpha platform. The hit does not destroy it completely. EOD troops neutralise it later, and checks confirm the explosive payload. The case shows both the existence of a response tier other than the missile, and the operational costs that remain after firing.[12]
Fragments of an aerial drone found near Tuzla beach contained an explosive payload, neutralised by controlled detonation by Naval Forces EOD divers. MApN notes that first checks indicate the fragments came from a Ukrainian-made drone; this preliminary finding does not establish the operator, ownership or the circumstances in which the drone reached the area. The case was taken over by the Prosecutor's Office attached to the Constanța Court of Appeal.[8]
At Costinești, EOD divers identify a Gerbera drone body with no explosive payload.[13] In the Gura Portiței district, another Gerbera fragment carries an explosive payload and is neutralised on the spot.[14] The aircraft type alone does not establish the danger; the pyrotechnic assessment does so for each object.
The Ministry of Defence of the Republic of Moldova reports that an unidentified drone crossed the south of the country between 05:55 and 06:09, from the Odesa region towards Romania. MApN then tracked the target near Târgu Bujor, scrambled two F-16s and an IAR-330 SOCAT, and issued a RO-Alert. The aerial search around Târgu Bujor–Matca found no impact traces or fragments, and the alarm ended at 08:52.[15][16] Later, a suspect object was found in a household in Ciușlea, Garoafa commune. The authorities set up a safety perimeter and evacuated nearby residents. MApN, the SRI and the emergency inspectorate (ISU) are examining the object; the link with the morning's tracked drone is unconfirmed.[17]
MApN's radar system detected an aerial target about 4 km east of Vâlcove, near the Ukrainian border. Two Spanish F-18s from the 57th Mihail Kogălniceanu Air Base were scrambled for monitoring, and a RO-Alert was issued for northern Tulcea county at 07:31. The statement sent to AGERPRES does not record the target entering Romanian airspace, and the MApN table stays at 25 intrusions, so the episode is not counted here as a new incursion.[18]
A fragment washed ashore on Olimp beach was identified as carrying an explosive payload and detonated in a controlled way after the area was sealed off. Residents and tourists received a RO-Alert message to keep their distance from the operation; the drone's provenance is not established in the public sources consulted.[19]
Near Plauru, MApN EOD specialists found drone debris. The preliminary assessment identified no explosive residue; the fragments were collected for expertise, and the MApN statement does not establish the fire's cause or whether the debris caused the damage.[25]
On 26 August, MApN radar detected an aerial target about 8 km north of Vâlcove, in Ukraine, near the border. An IAR-330 PUMA SOCAT helicopter was scrambled for monitoring, and IGSU sent a RO-Alert at 13:15 for northern and eastern Tulcea county. The air alert ended at 14:44; no intrusions into national airspace were reported.[20]
On the morning of 27 August, MApN radar detected an aerial target about 3 km north of Vâlcove, in Ukraine, near Romania's border. Ground-based air-defence systems were put on alert, and IGSU issued a RO-Alert for northern and eastern Tulcea county at 06:54. The alert ended at 08:35; MApN detected no intrusions into national airspace. The cited sources do not establish the target's type, payload or provenance.[21][22]
An aerial target detected about 33 km north of Snake Island prompted the scramble of two Spanish F-18 aircraft at 18:41 and a RO-Alert for northern Tulcea county at 18:44. The air alert ended at 19:48; the authorities reported no intrusions into national airspace. Public sources do not establish the target's type or provenance here.[23][24]
Overnight from 31 August to 1 September, two aerial targets were detected about 24 km north-east of Vâlcove, in Ukraine, near the border. Two Spanish F-18s were scrambled at 23:43, and an IAR-330 PUMA SOCAT at 00:05; IGSU issued a RO-Alert in north-eastern Tulcea county at 23:56. The alert ended at 01:15, with no intrusions into national airspace reported by MApN.[26]
A damaged drone-type aircraft was found on farmland at Viișoara, Vaslui county. Vaslui police (IPJ) confirm the case and its referral to the Prosecutor's Office; the SRI, police and gendarmerie intervened. Digi24 reports that first checks by SRI specialists indicated the presence of explosives. SRI specialists later neutralised the aircraft by controlled detonation, in safe conditions, according to the prefect quoted by HotNews. The provenance, exact type and circumstances of its arrival at Viișoara remain under the investigation of the Prosecutor's Office attached to the Iași Court of Appeal. The case is one of ground search and neutralisation, not a confirmed aerial shootdown.[27][28][29]
On 3 September, Naval Forces EOD divers neutralised a drone fragment with an explosive payload near the Central Platform. On 4 September, a second fragment with explosives was neutralised about 5 nautical miles east of the Sulina branch entrance. Both were reported by commercial vessels. The cases are EOD interventions on objects found at sea, not aerial shootdowns.[30]
At 23:40, MApN's radar surveillance system detected a group of aerial targets near the river border with Ukraine. Air-defence systems were put on alert; two Spanish F-18 aircraft and an IAR-330 Puma SOCAT helicopter were readied for takeoff. A RO-Alert was sent in northern Tulcea county at 00:10. MApN reported no intrusions into national airspace, and the alert ended at 00:42.[31]
Ukraine's and the Republic of Moldova's Air Operations Centres informed Romania that a drone was heading north-east. Two F-16s took off from the 86th Borcea Air Base, and a RO-Alert message was sent in Botoșani at 16:20. A flying object was later found in a cornfield at Botoșenița Mare, Suceava county; the impact caused a small fire and a cavity about 1 m across and 30 cm deep. There were no casualties. MApN has not yet published the aircraft's type, operator or provenance.[32]
At 03:10, MApN radar detected a target about 35 km north of Chilia and two F-16s from the 86th Borcea Air Base took off for monitoring. At 03:18 a RO-Alert message was sent in northern Tulcea county. Around 04:20 two more targets were detected about 30 km north of Periprava, and a second RO-Alert message was sent at 04:51. The alert ended at 05:18; MApN reported no intrusions into national airspace.[33]
The tally
The official tally shows the threat's frequency and fire's rarity. For the twenty-three intrusions that ended without a shootdown, the table gives no trajectory, classification, duration or existence of a safe engagement window. The result cannot be responsibly assessed from totals alone.
The MApN-published table, marked “Data updated 12 September 2026”, reports for 2026 71 attacks near the border, 55 aircraft-scramble situations, 27 unauthorised intrusions, 4 downed drones and 37 situations with drones or fragments identified.[2] Since the start of the war, the ministry reports 138 attacks near the border, 90 aircraft-scramble situations, 46 unauthorised intrusions, 4 downed drones and 74 situations with drones or fragments identified. The categories overlap: the same incident may appear in several columns. The table does not publish the number of aircraft or flight hours and does not link each change to a named case.
The MApN tally is updated to 12 September; against the 5 September table, the 2026 values grow by 5 attacks near the border, 4 aircraft-scramble situations, 2 intrusions and 2 situations with identified drones or fragments. The table does not nominally attribute each case's variation.
The tally says two things for sure: the threat is recurrent, and the response permanently consumes readiness, personnel and flight hours, even when no shot is fired. But it does not allow computing the annual cost. “55 scrambles” does not state the total number of aircraft or mission durations, and the marginal cost of a flight hour differs from the total operating cost.
Against the table available on 5 September, the version updated on 12 September reports 71 attacks near the border and 55 aircraft-scramble situations; intrusions reach 27, and situations with identified drones or fragments 37. The MApN table does not link this variation to named cases and also includes a reclassification for 2022, so it cannot be automatically attributed to the 12 September incident or other recent interventions.
For a verifiable comparison, at least the aggregate number of aircraft, flight hours and accounting basis would need publishing. Until then, the correct conclusion is more modest: the missile is the visible cost; the air alert is the recurrent cost, still publicly unquantified.
27 intrusions, 55 scrambles, 4 shootdowns and 37 situations with drones or fragments in 2026.
MApN table, updated 12 September; the categories overlap and do not add up to a total of distinct incidents.
Times, tracks and impact zones for the four shootdowns.
The targets' types and the munitions used remain largely unpublished.
The register of the 27 cases: duration, depth, classification, populated area and the decision's reason.
Without it, a consistent engagement rule cannot be demonstrated.
Indicative scenario
The nominal cost ratio can show the economic pressure, but it does not judge a firing. The interaction keeps only the variables that can be honestly expressed as ranges: the means, the number of shots and the target's possible type.
The number used in the Romanian cases has not been published.
Nominal scenario: excludes neutralisation probability, the defended objective's value, ground risk, platform, sensors, stockpile and resupply. That is precisely why it issues no sustainability verdict.
24 July · the public chronology
The Padina case shows why price enters the decision late. We have the public hours, but not the moments of classification, authorisation or the alternatives assessed.[4]
MApN radar detects the target about 20 km east of Sulina.
public point; classification is not publicTwo Italian aircraft take off from Mihail Kogălniceanu for monitoring.
9 minutes after detectionTwo F-16s take off from the 86th Air Base. The reasons for the sequence are not publicly explained.
77 minutes after detectionAn F-16 launches a missile and downs the target over an uninhabited area.
6 minutes after the F-16 takeoffThe counterargument
The accounting ratio contains a truth, but not the whole decision. The counterargument deserves to be understood in its strongest form.
An air-to-air missile can offer high probability in the right geometry. When the target approaches an inhabited area, the relevant cost covers the drone's price and the probable loss if the defence misses. At Galați, the Geran-2 detonated a warhead of about 30 kg, lightly injured two people and led to the evacuation or self-evacuation of about 70 residents.[5]
The relevant cost is not just the target's price. It is also the loss the defence is trying to avoid.The defended-value principle
This argument can justify an expensive means when the risk to people is real; public data does not, however, allow fully reconstructing the counterfactual in each case. The systemic question remains whether the same solution can be repeated without consuming the stockpile reserved for threats with no alternative.
This is where the levels separate. At the tactical level, the three July targets were downed. At the operational level, Romania must be able to repeat the defence with a combination of sensors and effectors. At the strategic level, the adversary must not be able to exhaust the stockpiles or force aviation to react permanently with the costliest means.
Merops
Merops is designed primarily for Shahed/Geran-type targets and offers a far cheaper interceptor than an air-to-air missile. NATO publicly presented the system and its mass advantage, but the detailed operational data comes from operator statements and has not been independently audited.[6]
MApN says the system was operationalised and integrated on 24 June. The statement confirms the capability; national coverage cannot be deduced, since the number of systems, the interceptor stockpile, the defended objectives and the engagement zones are not public.[7]
what it solves
The interceptor is publicly quoted around $14,500–15,000. The system, sensors, personnel and logistics are not included in this figure.
what it solves
A cheaper effector can be bought in greater numbers and keeps sophisticated missiles for the threats that truly require them.
what it does not solve
An interceptor only hits what it is shown. Merops brings its own radar and optical sensors, but needs a good air picture earlier — that is, exactly the layer before it.
what it does not solve
Merops provides point defence. Layered coverage of the whole border also requires other systems. The number and disposition of Merops units are not public.
what it does not prove
Claims about the success rate and number of interceptions are not accompanied by a public dataset, definitions and test conditions.
The fact that an F-16 was sent on 24 July does not prove Merops failed. It may mean lack of coverage, insufficient classification, conserved stockpile, deconfliction, an unsafe zone, rules of engagement, or the deliberate choice of the most mobile platform. MApN can publicly explain the categories of reasons without disclosing exploitable positions or procedures.
The effector ladder
There is no universal means. A layered defence combines sensors, command and control, electronic means, guns, dedicated interceptors and missiles. The cheapest means is only useful if it has the range, success probability and geometry required at that moment.
| Means | Cost per shot | Where it excels | Where it falls short |
|---|---|---|---|
| Patriot PAC-3 MSE | ~$4.2m | Fast, sophisticated threats, including ballistic ones | Valuable stockpile; using it against slow drones carries a high opportunity cost |
| AIM-120 AMRAAM | ~$1.0–1.38m | Beyond-visual-range interception, depending on platform and variant | Requires a platform, a quality track and stockpile; cost per shot is not mission cost |
| AIM-9X Sidewinder | ~$0.4–0.9m | Close engagement from a compatible platform | No use is officially confirmed in the three July cases |
| APKWS, laser-guided rocket | $15–20k | Nominal cost comparable to some drones | Requires a compatible platform and designation; not documented in the analysed cases |
| Merops interceptor | ~$14.5–15k | Shahed/Geran-type targets in the defended area | Point coverage; the public cost covers the interceptor and excludes the complete system |
| F-16 onboard gun | unpublished / variable | Close engagement, when geometry and safety allow | On 20 August it hit the maritime drone without fully destroying it; the mission continued with EOD intervention |
| Anti-aircraft gun | variable | Close defence, high volume of fire | Short range; needs radar and fire control; projectiles and fragments fall down |
| Electronic warfare | unpublished | Can disrupt navigation or the link without an explosion | Has system costs and spectrum effects; effectiveness depends on the target's guidance |
| RO-Alert and sheltering | not comparable | Reduces people's exposure when neutralisation is unsafe | A civil-protection measure; its cost cannot be compared with effectors' |
The 20 August case offers a rare field observation: the onboard gun hit the target, and neutralisation then required a ship, an EOD team and extra time. The ammunition's price would describe only part of the intervention.
The real limit
A state can accept an unfavourable financial exchange to save lives. But sustainability is judged by stockpile, alternatives and resupply — and Romania does not publish enough data for that assessment.
An aircraft and a battery carry finite loads. Every shot has an opportunity cost, and campaigns with real targets, decoys and reconnaissance may also aim to provoke and wear down the defence. This is a general doctrinal risk; the public data on the three July incursions does not demonstrate such an intent.
| Programme | Public value | Quantity / role | What we know about the timeline |
|---|---|---|---|
| SAFE C-UAS Rheinmetall | €981.95m | 7 Skynex, 2 Skyranger 35, 2 Millennium | Contract signed 29 May 2026; the full timeline must be followed per programme |
| 35 mm AHEAD ammunition | €449.75m | 401,760 rounds for close-defence systems | Contract signed 29 May 2026 |
| SHORAD–VSHORAD Rafael | 3.049bn lei | First subsequent contract: integrated system, SHORAD, VSHORAD and training | First two VSHORADs: within 3 years |
| Merops | unpublished | System provided by the USA, operationalised and integrated | Official announcement: 24 June 2026; quantity and coverage are not public |
What is proven, what is declared
confirmed
MApN published the times and zones of the four aerial shootdowns of 2026. The May case's expertise confirms a Russian Geran-2 with an explosive warhead, and the Tuzla assessment confirms an explosive payload neutralised by controlled detonation.
estimated
Munitions, the number of shots and mission costs are not public. Effector and drone prices are ranges from different sources.
declared
Integration is confirmed; quantity, coverage and auditable operational performance are not public.
unknown
The first July target is preliminarily Shahed-type. For the next two and for the drone downed on 16 August, type, provenance and intent remain unknown. At Tuzla, MApN says the fragments came from a Ukrainian-made drone; operator and ownership remain unknown.
What can be publicly verified
Useful transparency does not mean coordinates, exact stockpiles or operative rules. It means definitions, comparable tallies and explanations at the level of principle.
Each extra minute of warning can move the engagement further from homes and keep more tiers of the defence open.
Earlier detection does not guarantee neutralisation, but it can widen the time for classification, alerting and choosing a safe zone. A separate proposal explores passive sensors for the Lower Danube.
Related reading: Sentinela Dunării ↗
In parallel, command-and-control exercises, civil-protection procedures, more precise alerts and publication of the principles by which risk to people on the ground is weighed are needed. A good architecture does not promise every drone will be downed; it explains why each layer exists and what limit it has.
Sources
Primary source: Russian Geran-2, warhead of about 30 kg and initial detection 19 km from the border.
Primary source: detection east of Sulina, the track, the scrambled aircraft, engagement with a missile and the shootdown at Padina.
Primary source: detection, two F-16s, identification and neutralisation procedures, impact in an unpopulated area.
Primary source: the shootdown at 10:13, 12 km north-east of Sulina, in territorial waters.
Primary source: two aircraft possibly carrying explosive payloads, neutralised in a controlled way by EOD divers.
Primary source: the intrusion from the Republic of Moldova, engagement authorisation and the shootdown by a Spanish F-18.
Primary source: recovery of the drone's fragments and neutralisation of the interceptor missile's fragments.
Primary source: the maritime drone hit by an F-16, later neutralisation by EOD and the confirmed explosive payload.
Primary source: the explosive payload, the controlled detonation, the preliminary conclusion of a Ukrainian-made drone and the case's takeover by the Prosecutor's Office.
Primary source: identification of the Gerbera drone body and the EOD assessment finding no explosive payload.
Primary source: the Gerbera fragment with an explosive payload and its neutralisation by the EOD team.
Primary source: the air reaction, the fruitless search around Târgu Bujor–Matca and the alarm's end at 08:52.
Primary source: the crossing of the Republic of Moldova's south by an unidentified drone and its exit towards Romania at 06:09.
The mayor's confirmation of the object found in a household and the safety perimeter; identification and the link with the morning incident remain ongoing.
MApN statement sent to AGERPRES: the aerial target detected about 4 km east of Vâlcove, two Spanish F-18s scrambled from the 57th Mihail Kogălniceanu Air Base and a RO-Alert issued at 07:31 for northern Tulcea county.
Secondary source reproducing the RO-Alert message: the fragment with an explosive payload was detonated in a controlled way after the beach was sealed off; the drone's provenance is not established in the verified public source.
Secondary source quoting MApN: the target detected about 8 km north of Vâlcove, the scrambled helicopter, RO-Alert sent at 13:15, the alert ended at 14:44 and the absence of a reported intrusion.
MApN statement sent to AGERPRES: the aerial target detected about 3 km north of Vâlcove, the alert of ground-based air-defence systems, RO-Alert at 06:54, the alert's end at 08:35 and the absence of a reported intrusion.
Concordant account of the MApN information; offers no independent classification of the target's type, payload or provenance.
Updated account quoting MApN: the target detected about 33 km north of Snake Island, two F-18s scrambled at 18:41, RO-Alert at 18:44, the alert's end at 19:48 and the absence of a reported intrusion.
Concordant account of the MApN update; confirms 19:48 as the alert's end and the lack of a reported intrusion, without assigning the incident a new category in the aggregate table.
Primary source: competences, institutional cooperation, NATO integration and measures applicable to unmanned systems.
Primary source, 24 June 2026: operationalisation and integration after testing and validation.
Allied primary source: the counter-Shahed/Geran role, reduced cost and the mass-procurement advantage; the claims come from the operator and have not been independently audited.
Primary source: 7 Skynex, 2 Skyranger 35 and 2 Millennium for €981.95m, plus AHEAD ammunition as a separate project.
Primary source: the subsequent contract of 3.049bn lei and the three-year deadline for the first two VSHORAD systems.
Methodological analysis: the cost ratio is useful but insufficient without risk, coverage and the defended objective's value.
Primary source: the 2026 table, updated 5 September, with 66 / 51 / 25 / 4 / 35 in the columns published here. The since-the-start-of-the-war total is 133 / 86 / 44 / 4 / 72; the update also includes a reclassification for 2022.
Primary source: two targets detected in Ukraine, the scramble of two Spanish F-18s and one IAR-330 SOCAT, RO-Alert and the alert's end with no intrusion reported in national airspace.
Agency source: IPJ Vaslui confirms the finding of a damaged drone and the authorities' intervention; the case remains under investigation.
Secondary source: reports that first checks by SRI specialists indicated the presence of explosives; type and provenance remain publicly unclarified.
Secondary source: the prefect confirms the SRI pyrotechnics team detonated the aircraft in safe conditions; the investigation continues on provenance and circumstances.
Primary source: two drone fragments with explosive payloads, neutralised by Naval Forces EOD divers after being reported by commercial vessels.
Primary source: group of targets detected near the river border with Ukraine, two Spanish F-18s and one IAR-330 Puma SOCAT readied for takeoff, RO-Alert at 00:10, the alert's end at 00:42 and the absence of a reported intrusion.
Primary source: the notification about the drone heading towards Romania's north-east, two F-16s scrambled from the 86th Borcea Air Base, RO-Alert in Botoșani and the object crashed near Botoșenița Mare, Suceava.
The official statement records the target detected about 35 km north of Chilia, two more targets about 30 km north of Periprava, two F-16 takeoffs, two RO-Alert messages, the alert's end at 05:18 and the absence of a reported intrusion.
Two people lightly injured and about 70 people evacuated or self-evacuated.
The price of fire: APKWS at $15,000–20,000, AMRAAM around a million, and the strategic problem of the unfavourable ratio sustained over time.
Why a Shahed's cost is hard to pin down and why $35,000 is used as a conservative benchmark.