Bulgaria Starlink Sabotage Raises Fears Over Europe’s Satellite Infrastructure Vulnerability
Two masked men torched 11 of 17 Starlink antennas at a site near Sofia, damaging a key ground node for SpaceX’s satellite network in Bulgaria. Opposition politicians are demanding answers from security services, warning that the attack echoes earlier strikes on defense‑linked infrastructure in the EU.
An overnight arson attack on a Starlink ground site outside Bulgaria’s capital has jolted officials and technology users who increasingly depend on satellite connectivity for everything from business to border control.
According to local reports, two masked men set fire to 11 of the 17 Starlink antennas at an installation near Sofia, damaging infrastructure that links into SpaceX’s satellite internet network. The remaining six antennas were not reported destroyed, but authorities have not yet detailed the full operational impact on connectivity.
While Starlink terminals on homes, vehicles, or ships draw most public attention, these larger ground facilities act as gateways, routing traffic between satellites overhead and terrestrial fiber networks. Damaging them can degrade service for a wider area and, if coordinated, could disrupt communications for critical sectors that have come to rely on satellite links as a backup to terrestrial systems.
The attack immediately spilled into Bulgaria’s internal politics. Opposition politicians Ivaylo Mirchev and Bozhidar Bozhanov called on the State Agency for National Security and the Interior Ministry to explain whether they had any prior intelligence about a threat to the site. Mirchev drew explicit parallels to previous acts of sabotage against defense‑related infrastructure in the European Union, suggesting that the Starlink site should have been treated as a potential target.
For ordinary users, the damage might show up as slower or less reliable service. For governments and militaries, the incident will rekindle concerns about how quickly an adversary—or even a loosely organized group—could degrade satellite‑dependent systems with cheap tools and minimal expertise. Cutting a fiber line requires specialized knowledge and access; dousing exposed antennas in fuel and setting them alight does not.
Strategically, the attack sits at the intersection of two trends. First, commercial satellite networks like Starlink have become deeply embedded in national security and emergency response plans, providing connectivity to border agents, remote military units, or critical infrastructure. Second, those networks rely on physical infrastructure that often looks like civilian telecom gear and may not be guarded like a hardened military facility.
The timing also matters. In Ukraine, Starlink’s military package, branded Starshield, has become woven into battlefield communications, and any disruption or restriction to that service sparks intense scrutiny. News that a Starlink site has been physically attacked inside an EU member state will sharpen debates in European capitals about how to classify and protect such infrastructure.
One clear lesson is that satellite resilience is not just about orbital redundancy or cyber defenses. Antennas on the ground, power supplies, and network hubs are all part of the same system. If any link is easy to reach and poorly secured, the whole chain becomes vulnerable to low‑tech sabotage.
Investigators in Bulgaria now face immediate questions: who were the masked attackers, were they acting on their own or at someone’s direction, and why this site? Outside the country, policymakers will be watching whether Sofia upgrades protection around satellite ground stations, whether Brussels moves to classify such sites as critical European infrastructure, and if other Starlink or rival facilities across the continent quietly tighten their physical security in response.
Sources
- OSINT