Seen, Not Stopped: A Fifth Ship Hit off Bulgaria and Britain's £10bn for Ukraine
A French maritime patrol aircraft was the first to spot the drone attack on the container ship Contship Jet off Bulgaria's coast. Spotting a strike and stopping one are different things. On the same day, London unveiled more than £10bn for Ukraine, including £500m for winter air defence. At sea…
Baltic Security Monitor | Analysis
Security Watch, 29 October 2026, 08:00 EET · 2 MATERIAL UPDATES (both HIGH) · 26 open investigations
A French maritime patrol aircraft was the first to spot the drone attack on the container ship Contship Jet off Bulgaria's coast. Spotting a strike and stopping one are different things. On the same day, London unveiled more than £10bn for Ukraine, including £500m for winter air defence. At sea and in the air, the question is the same: how quickly do decisions become actual protection?
The cycle in numbers
- Monitoring window: 28 October 20:00 to 29 October 08:00 EET, with up to 24 hours of lookback
- MATERIAL UPDATES: 2, both rated HIGH
- WATCH: 26 open investigations
- Uncertainty markers: 🟡 5 · 🔴 0
Both events took place on 28 October and were missed by the previous 20:00 cycle. They are late captures, not new overnight developments.
The signal of the day is the gap between surveillance and defence. NATO patrol aircraft are already flying over the western Black Sea, and one of them detected this attack first. Yet a fifth merchant ship this month was still struck inside Bulgaria's economic zone. Britain's package follows the same pattern: the headline figure is large, but most of it is guarantees and credit capacity, not interceptors in launchers.
1. Three sea drones hit Contship Jet, the fifth strike of October
MATERIAL — HIGH · Black Sea / maritime security / NATO eastern flank
On 28 October three uncrewed surface vessels struck the Liberian-flagged container ship Contship Jet roughly 17 nautical miles east of Cape Kaliakra. Bulgarian Defence Minister Dimitar Stoyanov gave a different reference point, about 21 miles from Shabla. Either way, the ship was inside Bulgaria's exclusive economic zone and outside its territorial waters.
The vessel was sailing from Haifa to Constanța with 421 containers. The crew abandoned ship at 12:13. All 18 seafarers, 14 Filipinos and four Ukrainians, were rescued and brought to Varna aboard a Bulgarian Navy vessel, in an operation involving the navy, the air force, the border police and the maritime rescue service.
The company that commented on the incident reported that the ship was listing and had lost containers overboard. Its final condition is still unknown.
The most telling detail from Bulgarian sources concerns surveillance. The navy's operations centre received the first alert from a French maritime patrol aircraft. Earlier in October France sent an Atlantique 2 to Constanța, while the US Navy has been flying a P-8A Poseidon over the Black Sea.
According to the Bulgarian news agency BTA, this is the fifth attack on ships in Bulgaria's economic zone in October alone. Two merchant vessels were hit on 6 October. On 13 October the Guinea-Bissau-flagged HS Dignity sank and the Malta-flagged Chelsea 3 was damaged.
The strike came while the defence ministers of Bulgaria, Romania and Türkiye were meeting in Sofia. The three NATO allies condemned attacks on civilian shipping and agreed to deepen coordination, intelligence sharing and early warning.
Sofia has not assigned responsibility. The opposition accuses the government of refusing to name the aggressor. Democratic Bulgaria wants diplomatic notes and a clear line on Russia, while Continue the Change has criticised the prime minister for pointing at Romania over earlier attacks.
BSM analysis
This is not a rerun of Russian claims about two Odesa-bound ships on 25 October, nor a follow-up to the Khoryv sinking on 23 October. It is a separate, identified incident with a confirmed rescue.
The structural point matters more. The strikes are now hitting traffic between NATO ports and third countries with no link to Ukrainian harbours. Contship Jet was on an Israel–Romania run. The risk to merchant shipping is no longer confined to the Ukrainian corridor.
Surveillance worked: a French aircraft saw the attack. What does not yet exist is a way to intercept sea drones inside Bulgaria's economic zone. The Sofia agreement covers coordination, not escorts or standing patrols. The next test is whether operational measures follow.
For the Baltic region the pattern is familiar. Protecting Baltic shipping lanes and subsea infrastructure also rests on patrol aircraft and data sharing. The Black Sea is showing where that model runs out.
🟡 The drone operator, the final damage assessment and the cargo contents remain unverified.
2. Britain pledges over £10bn for Ukraine, £500m of it for winter air defence
MATERIAL — HIGH · Military assistance / air defence / financial support
On 28 October, as part of its budget, the UK government announced more than £10bn in additional financial support for Ukraine. Prime Minister Andy Burnham and Chancellor John Healey briefed Volodymyr Zelenskyy ahead of the announcement.
HM Treasury breaks the package down as follows.
- £7bn in economic support over three years, including up to £5.5bn in World Bank guarantees and a £0.5bn grant to the International Development Association crisis facility, expected to mobilise a further £1.5bn for Ukraine.
- £3bn of additional UK Export Finance capacity, prioritised for military support, lifting total UKEF cover for Ukraine to £6.5bn.
- £500m in urgent military assistance for air defence this winter.
Together with £750m already committed through the ERA loan, funded by proceeds from immobilised Russian assets, UK military support this year rises to £4.3bn. That sits on top of the standing commitment of £3bn a year until at least 2030–31.
The government also committed to reach 3% of GDP on defence by 2030, with NATO's 3.5% target by 2035. Detailed funding plans are deferred to next year's Spending Review.
BSM analysis
The £10bn headline is not cash for Kyiv. Most of the package is guarantees and credit capacity. It strengthens the financial scaffolding for a long war and for reconstruction, but none of it reaches the front automatically.
The real news is the £500m for air defence. Ukraine continues to report shortages of Patriot and NASAMS interceptors, and some US transfer approvals are still pending. Money without access to production queues and without Pentagon sign-off is only potential.
For NATO's northeastern flank, the package signals that a key pillar of the coalition is holding. It does not involve any new deployment in the region.
🟡 Equipment quantities, payment schedules and completed deliveries are not established.
WATCH: still under review
Moscow, 613 drones. Moscow Mayor Sergei Sobyanin said 613 drones were headed for the capital overnight, with 231 downed on approach to the city and the rest further out. This continues a run of mass drone attacks on the Moscow region, including a September raid in which Russian air defence claimed more than 1,600 kills. The count, interception figures and damage have not been independently confirmed. Repeating the mayor's statement is not corroboration, so the item stays at WATCH.
Netherlands, €500m. On 28 October The Hague announced €500m in military support, including drones and air defence. But a separate €500m package for drones and PURL was already announced in June, and in July the Dutch defence minister said the country had reached the limit of its capacity for military aid. Whether October brings new money or repackages existing commitments is not established.
Patriot / NASAMS / PURL. US transfer approvals remain unresolved. Without them, British and European air-defence money cannot turn into interceptors.
NATO Black Sea reinforcement. The French Atlantique 2 deployment to Constanța is known. Other surveillance deployments are not yet confirmed.
Conclusion
28 October showed two sides of the same problem. In the Black Sea, NATO can now see the attacks but cannot yet prevent them. In the British budget, Ukraine received big numbers whose real effect depends on contracts, production lines and American approvals.
The next checkpoints are concrete: who was behind the strike on Contship Jet, whether the Bulgarian, Romanian and Turkish commitments turn into patrols, and how many missiles £500m buys before the first frost.
Seeing is a start. Protecting is something else.
Baltic Security Monitor (osint-baltic.com) — an analytical publication covering security on NATO's northeastern flank.
Security Watch cycle data is collected by an automated open-source monitoring system and independently verified.
