The Black Sea after the October 13 attacks: what Romania–Bulgaria coordination can and cannot do

Two commercial vessels were struck by drones off the Bulgarian Black Sea coast on Tuesday, 13 October 2026, one of them — the "Chelsea 3" — being hit by three drones approximately 15 nautical miles from Byala.

What is at stake is not an isolated incident, but the recurring cost of commercial navigation in a maritime basin where a NATO state finds that attacks are occurring within its exclusive economic zone without the Alliance having a rapid deterrence instrument. The falsifiable thesis of this text: over the coming weeks, the dominant reaction will be regional coordination and increased surveillance — the dominant scenario, estimated at roughly half of the probability space — rather than a forceful measure or a formal invocation of Article 4, with the caveat that a new strike resulting in casualties on a vessel flying the flag of a member state could rapidly upend this balance. Who pays: shipowners, insurers and the ports in the Constanța–Varna–Burgas triangle, through higher premiums and longer transit times.

1. What the sources establish about Tuesday's attack and what remains unconfirmed

According to the account by the Bulgarian public broadcaster, the vessel "Chelsea 3", flying the Maltese flag and registered in Odesa, was struck by three drones approximately 15 miles from Byala, with the alarm raised at 01:30. The same source indicates 15 crew members — seven Ukrainians and eight Azerbaijanis — evacuated to Varna, of whom five injured received medical care.

The same source also provides the technical and route data: a 136-metre vessel sailing from the Turkish port of Giresun to Giurgiulești, with the declared cargo bound for the Republic of Moldova, left adrift without a crew in the direction of Cape Saint Atanas. The port of Giurgiulești is the Republic of Moldova's only river-maritime gateway, which links the incident to a logistics chain that does not stop at the Bulgarian shore. A single source among the available material states that one of the vessels sank and that 11 sailors are reported missing.

The figure does not appear confirmed by any maritime authority in the sources consulted and must be treated as such: a press account, not an official toll. The context is not new. Mediafax notes that, the previous week, two other commercial vessels had been struck by drones in Bulgaria's exclusive economic zone. Four vessels in roughly two weeks, in the same area, indicates a pattern, not an isolated accident — although the technical attribution of each attack is not publicly established.

2. Rumen Radev: the office that sources describe differently

Rumen Radev is the central actor in the Bulgarian response: he publicly announced the strikes, convened an extraordinary meeting of the Security Council and requested external support. The sources consulted, however, describe him as "prime minister", respectively "the Bulgarian premier" — a formulation used both by the Bulgarian public broadcaster and by Mediafax.

This designation cannot be independently verified in the available material, and the institutional office matters analytically: a head of government has executive and budgetary levers, while a head of state has mainly external representation duties and formal command authority. Regardless of the title, the actions attributed to Radev are consistent with a diplomatic register. He described the attacks as "unacceptable" and announced that he wishes to summon Russia's ambassador, Eleonora Mitrofanova.

Mitrofanova appears in the sources exclusively in her capacity as ambassador of the Russian Federation to Sofia, the recipient of the summons. Summoning an ambassador is the most visible diplomatic instrument with zero domestic cost. It conveys a public signal of displeasure without committing military resources and without automatically triggering allied procedures. In the grammar of signals described by the literature on perception in international relations, it is a legible but cheap gesture — and precisely for that reason limited in its deterrent effect.

One element is worth highlighting without interpretation: a press account describes Radev as a leader "considered pro-Russian" who, in this case, accuses the Kremlin. The label is a journalistic characterisation, not an institutional finding; its analytical relevance is that Radev's public positioning on this file departs from the expectation the label creates.

3. The mechanism: from drone to insurance premium and to regional coordination

The causal chain has four observable links. The first: repeated strikes on commercial vessels in Bulgaria's exclusive economic zone — four vessels in roughly two weeks, according to the accounts cited above. The second: the affected route is not marginal, but the corridor linking Turkish ports to the Danube mouths and to Giurgiulești, that is, the flow of goods to and from the Republic of Moldova and Romania. The third link is economic. War risk in the Black Sea translates into maritime insurance premiums, port call durations and crew availability.

The mechanism nonetheless remains the standard one: observable risk is repriced ahead of any political decision. The fourth link is political. The affected state seeks allied cover, because it does not alone possess the capacity to secure a maritime basin. Radev stated that he would discuss the incident with NATO Secretary General Mark Rutte, and NATO announced that it is adjusting its defence posture following the attacks. Rutte appears in the sources as the Alliance's Secretary General, the author of the public message of continued cooperation in the Black Sea.

The immediate effect is therefore coordination, not retaliation. In Bucharest, Prime Minister Ilie Bolojan — described by Antena 3 CNN as interim prime minister, a designation the other sources do not repeat — spoke by phone with Radev. According to the Government's communiqué, cited by G4Media, the two discussed strengthening coordination between Romania and Bulgaria, including through cooperation with Turkey.

Bolojan condemned the attacks in Bulgaria's exclusive economic zone as "unacceptable" and as serious breaches of maritime and international law, adding that they are consequences of the war launched by Russia against Ukraine. The wording is an official position of the Romanian Government, not a judicial finding of attribution.

The counter-hypothesis: attribution is not publicly established

The alternative hypothesis must be stated and weighed. Strikes on vessels connected to the Ukrainian flow may also originate from sources other than Russian forces: stray drones, floating ordnance or operations wrongly attributed in a maritime space saturated with unmanned systems used by both belligerents.

None of the sources consulted presents an official technical attribution — radar, fragments, maritime investigation. The political statements from Sofia and Bucharest express a conviction, not an expert finding. The available evidence is not sufficient to demonstrate the author of the attack; it supports only the finding that the attacks occurred and that the littoral states treat them as an effect of the war in Ukraine.

This counter-hypothesis remains a tail scenario. The argument against it is the pattern: four vessels, the same area, the same category of targets, within a short interval. A pattern does not demonstrate intent, but it reduces the plausibility of repeated accident.

4. Why Romania–Bulgaria–Turkey coordination has structural limits

The Black Sea's NATO littoral triangle operates on three different logics. Romania treats the basin as an extension of the eastern flank and of Danube security. Bulgaria has a political class more divided over relations with Moscow, while Turkey manages the straits and prefers a balancing role, not automatic alignment. What the sources support is the declared intention of coordination, expressed in the Bolojan–Radev conversation. The second limit is legal. The attacks occurred in the exclusive economic zone, not in Bulgarian territorial waters.

The exclusive economic zone confers rights over resources, not full sovereignty, which complicates framing an attack as aggression against an ally's territory. The practical consequence: the threshold for a collective response remains high. The third limit is capacity. Continuous maritime surveillance, detection of small drones and protection of civilian vessels along long routes require sensors, ships and flight hours that none of the three states has in surplus.

The announcement regarding the adjustment of allied posture is a signal of intent; its translation into actual presence is measured in months, not days. Radev stated, according to the accounts, that Bulgaria is requesting assistance from NATO and the European Union.

5. The Bulgarian political calendar and the risk of misreading

A voter and an analyst read the same statement differently when it falls within a pre-electoral period. This caveat is methodologically important. If the ballot is confirmed, the harsh statements become partly interpretable as domestic political positioning; if not, they are read exclusively as a security response. Automatically treating any statement as electoral calculation is an error symmetrical to treating it as implemented policy. The simultaneity must be written down as fact, not as motive.

The sources do not document any intention by Radev to use the incident in an electoral key, and the present text does not assert it. In Romania, the position expressed by the Government takes the form of firm condemnation and an offer of coordination. The reactions of other Romanian political actors on this file do not appear in the sources consulted; assuming broad consensus without evidence would be an extrapolation.

6. Scenarios and signals to watch

Dominant scenario — regional coordination without escalation. Driver: pressure on commercial routes and Bulgaria's request for allied support. Constraint: the high legal threshold of the exclusive economic zone and limited surveillance capacity. Consequence: increased patrolling, radar data exchange, joint statements. Indicator: the appearance of additional allied missions publicly announced in the western Black Sea basin.

Plausible scenario — procedural escalation. A new strike with casualties could push Sofia towards formal consultations within the Alliance. Constraint: allies' reluctance to create a precedent for attacks on civilian vessels in international waters. Consequence: consultations and possible targeted deployments. Indicator: an official request for consultations communicated by the Bulgarian government.

Tail scenario — contested attribution. If a technical investigation points to an origin other than the one publicly presumed, the political cost falls on those who condemned quickly. Consequence: the quiet withdrawal of harsh formulations. Indicator: publication of a report by the Bulgarian maritime authorities.

Prediction	Horizon	Probability	How it is verified	Verification source
NATO publicly announces additional surveillance or presence measures in the Black Sea	by 31.12.2026	dominant scenario (55–70%)	official communiqué explicitly mentioning the Black Sea	nato.int, communiqués section
Bulgaria formally requests consultations under Article 4	by 31.01.2027	under one in four	official statement by the Bulgarian government or by NATO	nato.int; gov.bg
Bulgarian maritime authorities publish an official toll of crews and damaged vessels	by 30.11.2026	30–45%	communiqué of the maritime administration, with number of persons	Bulgarian Maritime Administration (marad.bg)
Cargo traffic at the port of Constanța falls quarter-on-quarter	Q4 2026 data, published in 2027	plausible scenario (35–50%)	quarterly port traffic series	INS; Constanța Maritime Ports Administration
An official technical attribution of the attacks is published by a Bulgarian or allied authority	by 31.03.2027	unlikely (15–30%)	investigation report with an attribution conclusion	gov.bg; nato.int

Method, definitions and figures

All factual data about the incident of 13 October 2026 come from press accounts cited inline, not from official documents: the Bulgarian public broadcaster for details of the vessel "Chelsea 3", Mediafax and G4Media for the content of the Romanian Government's communiqué, Antena 3 CNN for the designation of interim prime minister attributed to Ilie Bolojan, Libertatea for the sinking of one of the vessels and for the 11 sailors reported missing.

The "exclusive economic zone" designates, in the law of the sea, the maritime belt in which the littoral state has sovereign rights over resources, without exercising full territorial sovereignty. The distinction from territorial waters is relevant for the threshold of allied response and is used in the text in exactly this sense.

The distance of "15 miles from Byala" is reproduced as such from the source, without conversion and without specifying whether it refers to nautical or statute miles. The length of 136 metres and the Maltese flag have not been verified in a public ship registry; they remain attributed to the source.

The figure of four vessels struck in roughly two weeks results from summing two accounts: the two vessels of Tuesday and the two mentioned as attacked in the previous week. The sum does not come from a consolidated official toll and may contain overlaps if the sources refer partly to the same incidents.

The probabilities in the table are editorial estimates expressed in broad bands, not the results of a calibrated statistical model; they indicate orders of magnitude of confidence, not measured frequencies. This calibration caveat applies to all rows of the table and to all scenarios in section 6.

Port traffic figures and security incident figures are not comparable with each other: the former are quarterly statistical series subject to revisions, the latter are journalistically reported events, without a unified counting methodology.

Limits of the analysis

The analysis cannot establish who carried out the attacks, because none of the sources consulted contains an official technical attribution; the political condemnations from Sofia and Bucharest are government positions, not investigative conclusions. Also lacking are confirmations from a maritime authority regarding the number of missing sailors, the sinking of the second vessel and the identification data of the vessel "Chelsea 3". Even Rumen Radev's official office remains unclear, described in the available sources as prime minister, without this designation being independently verifiable here.

The diagnosis would be invalidated by three developments: an official attribution to an actor other than the one publicly presumed, a formal invocation of Article 4 followed by substantial military deployments, or a maritime report contradicting the casualty toll reported by the press. A reassessment is warranted upon the appearance of the first official communiqué from the Bulgarian maritime authorities or after any new attack on a commercial vessel in the same area.

The text's two most fragile assumptions are: that the pattern of the four vessels reflects deliberate action and not an accumulation of distinct incidents, and that the declared intention of Romania–Bulgaria–Turkey coordination will translate into operational capacity. Both depend on information that was not public at the time of writing.