Updated daily at 09:00 (EET) Index 5.1 = 0.0 elevated
Index methodology RSS
English
Baltic Monitor
Telegram
Issue of September 30, 2026 · WednesdayNo. 120

Poland scrambled aircraft in the morning; the operation ended by 08:00, and there is no threat on Polish territory

5.1/10 elevated = 0.0vs. previous issue
In this issue ▾
  1. Top stories of the day
  2. By area, in detail
  3. Contradictions and discrepancies
  4. Escalation risk assessment (0–10)
  5. Sources

Issue of 30 September 2026 — covering 29 – 30 September 2026

Note: On the morning of 30 September Poland scrambled aircraft because of strikes on Ukraine and ended the operation by 08:00, and the day before Estonia said with full confidence that the arson at defence firm Milrem was ordered by Russian special services. RMF24 carries the command's explicit line that no airspace violation was observed; Radio Lublin confirms the all-clear and the wording that there is no threat on Polish territory. (Previous issue — 29 September 2026, risk 5.1/10.)

Top stories of the day

  1. 30.09 — Poland scrambled aircraft in the morning; the operation ended by 08:00, and there is no threat on Polish territory. Shortly after 06:00 the Operational Command of the Armed Forces said military aircraft were operating in Polish airspace because of Russian strikes on Ukraine using air-attack means; ground-based air defence and radar reconnaissance were brought to readiness, and the measures were described as preventive. The Government Centre for Security sent an alert to Lublin and Subcarpathian provinces. The Polish Air Navigation Services Agency said Lublin and Rzeszów airports temporarily halted operations; Radio Lublin records the resumption at 07:15. At 07:41, according to Radio Lublin, the centre sent the all-clear: the air attack on Ukraine had ended and there is no threat on Polish territory. At 07:46 the same outlet quotes the command: military aviation operations have ended and ground systems have returned to routine activity. RMF24 (updated 30.09, 07:51) quotes a command statement from before 08:00 with the same ending and a separate sentence: no violation of Polish airspace was observed. That last sentence is not in the Radio Lublin text reviewed; that text has the centre's all-clear and the end of operations. No violations of Lithuanian, Latvian or Estonian airspace for 29–30 September were found in the LRT, LSM and ERR pages reviewed. There is no new strike at Dorohusk in this window. Sources: RMF24 — scramble and ending (30.09.2026, update 07:51); Radio Lublin — timeline 06:08–07:46 (30.09.2026).

  2. 29.09 — Estonia: the 15 August Milrem arson was ordered by Russian special services; the chargé was summoned the same day. The government (release of 29.09, 09:54) says that, on the basis of Internal Security Service intelligence, there are grounds to state with full confidence that the fire at the Milrem Robotics defence-company building on Betooni Street in Lasnamäe on the night of 15 August was sabotage commissioned by the special services of the Russian Federation. Prime Minister Kristen Michal says this directly. Foreign minister Margus Tsahkna summoned the Russian chargé d'affaires the same day; ERR and Postimees carry the summons and the same attribution. Per the release, the criminal investigation continues, and preliminary case information also points to a commissioned act; three Latvian suspects were detained in Latvia on 17 and 18 August and handed to Estonia on 17–18 September; they are in custody and no longer pose a threat. No lives were in danger in the fire. Milrem supplies THeMIS unmanned ground vehicles to Ukraine. The intelligence on which the conclusion rests is not published in the release. Postimees (29.09, 17:23) quotes Kremlin spokesman Dmitry Peskov: the statements are unfounded, contain not the slightest argument, and the Kremlin will not take them seriously. A Reuters dispatch of 29.09, circulated in reprints, also says the Kremlin called the accusations unfounded; no stable reuters.com page with that text was found in the results reviewed, so the verbatim quotation remains with Postimees. The Internal Security Service chief's wording "the first successful attack in Estonia this year" appears in an ERR headline and is absent from the government release, so it is not treated as established. Sources: Estonian government (29.09.2026, 09:54); ERR — summons of the chargé (29.09.2026); ERR — the government release; Postimees — Peskov (29.09.2026, 17:23); Delfi — Michal and Tsahkna.

  3. 29.09 — NATO answered the Kaliningrad note; the dpa text is harder than the embassy's public excerpts. Der Spiegel (29.09, 16:22) writes that NATO spokesperson Allison Hart rejected the Russian warning: the alliance is defensive, and no activity and no exercise poses a threat to any part of Russia; the threat of force, including irresponsible nuclear rhetoric, is condemned in the sharpest terms. Kyiv Post (29.09) carries the same: Hart confirmed receipt of an informal document and a reply, condemned the threat of force "including any irresponsible nuclear rhetoric", and repeated that NATO can defend every inch of Allied territory. The public embassy excerpt quoted by Kyiv Post still speaks of the "entire available arsenal" if NATO tried to isolate Kaliningrad, and does not contain the words "nuclear weapons". Spiegel, citing dpa, which said it had seen the letter, quotes other phrases: the risk of a direct conflict in which Russian strikes on decision-making centres in allied states would be possible at the outset, and readiness to use the entire arsenal of forces and capabilities, including nuclear weapons, if an attempt were made to isolate Kaliningrad. That is one agency's reading. The public excerpts in Kommersant/TASS from the 29 September issue, and the embassy quotation in Kyiv Post, do not contain those words. The background about an August air manoeuvre, which Spiegel presents as the presumed occasion for the note, does not belong to the 29–30 September window and is not used as a fresh fact. There is no new dated Baltic Fleet release on Kaliningrad. Sources: Der Spiegel — Hart and the dpa text (29.09.2026, 16:22); Kyiv Post — the NATO reply (29.09.2026).

  4. 29–30.09 — Night into the 29th: 129 drones; the 29th by day: 21; night into the 30th: 384; the northwest is absent from the lists. The night into 29 September closes a gap in the 29 September issue. BFM (29.09, 08:54) carries a defence ministry bulletin: from 20:00 Moscow time on 28 September to 08:00 on 29 September, 129 fixed-wing drones were shot down over Belgorod, Bryansk, Kursk, Oryol and Smolensk oblasts, Crimea and the Black Sea. Kommersant repeats the same list in its daytime note. Leningrad, Pskov and Kaliningrad oblasts and St Petersburg are not on it. The daytime of 29 September, Kommersant (29.09, 22:18) and Fontanka (29.09, 21:42): from 08:00 to 20:00, 21 drones were shot down over Belgorod and Kursk oblasts and the Black Sea. The northwest is absent. The night into 30 September, Kommersant (30.09, 08:53) and BFM (30.09, 08:42): from 20:00 on 29 September to 08:00 on 30 September, 384 drones were shot down. BFM names Belgorod, Bryansk, Volgograd, Voronezh, Kostroma, Kursk, Oryol, Penza, Rostov, Ryazan, Samara, Saratov and Ulyanovsk oblasts, the Moscow region, Bashkortostan, Crimea, Tatarstan, Perm Krai and the Black Sea. Kommersant groups the same window as 14 regions, the Moscow region, Bashkortostan, Crimea, Tatarstan, Perm Krai and the Black Sea, and confirms the figure 384. The northwest is absent from both texts. The figures are the ministry's: the outlets repeat one bulletin, which is not two counts. The south, the Volga and the centre are not the NATO line and are not tied to the score. A daytime bulletin for 30 September was not available at compilation. Sources: BFM — 129 drones overnight into 29 September; Kommersant — 21 drones on 29 September and the overnight repeat; Fontanka — 21 drones (29.09.2026, 21:42); Kommersant — 384 drones (30.09.2026, 08:53); BFM — 384 drones and the regional list.

  5. 29.09 — Sirens across Lithuania sounded from 11:52 to 11:55; it was a scheduled test. LRT (29.09, published 11:51, updated 11:58), citing the Fire and Rescue Department, writes in the past tense: the warning-system check inside Vyčio skliautas 2026 took place, sirens sounded for three minutes, from 11:52 to 11:55, information then went out on LRT and local radio, and short messages to phones ran from 11:52 to 12:00. The PAGD page for the same day is still worded as an announcement ("it will take place today"), not as a report on how many sirens worked. A separate count of failures was not found at compilation. The figures of 1,163 sirens and coverage of 69 percent of residents remain figures from that same announcement, not a new decision of the window. This is not a response to the Polish scramble on the morning of 30 September and not a response to Dorohusk. No report was found on the practical episode in Klaipėda district that the government had named in advance for 29 September. Sources: LRT — the sirens sounded (29.09.2026, update 11:58); PAGD — announcement of the 29 September check.

By area, in detail

Construction of military sites and fortifications

  • No kilometres of ditches, dragon's teeth, Baltic Defence Line sections or Eastern Shield dated 29–30 September were found.
  • The frame of "about 100 km already closed" still traces to the Polish General Staff's July summary and is not repeated here as a fresh report.

Deployment and movement of forces

  • Vyčio skliautas 2026 runs until 3 October. The dated episode of the window is the siren check on 29 September (item 5). The volunteers' practical day was 26 September and is not repeated. No outcome was found for the Klaipėda critical-infrastructure episode.
  • Namejs 2026 runs until 8 October. No episode dated specifically as Namejs for 29–30 September was found.
  • Perkūno griausmas 2026 runs until 15 October. No new dated episode for 29–30 September was found.
  • Ādaži. No new medical update on the four Italian soldiers for 29–30 September was found.
  • The four German Eurofighters at Lielvarde remain a fact of 24 September. No report of their departure for 29–30 September was found.
  • No new named exercise with dates, scale and content that is not already on a card appeared. Zapad-2026 is not being held. Ussisõnad-2026 is not independently confirmed.

Agreements and spending

  • No fresh decision on the Baltic ministers' letter asking for €500 million for counter-drone defence was found for 29–30 September. The sum is still not confirmed by a Commission quotation.
  • The EU Council's five projects remain a fact of 28 September and are not repeated as a new decision.
  • No new budget figures for the Baltics and Poland, dated 29–30 September and confirmed by two sources, were found.

Military aid and air defence / electronic warfare

  • Poland, morning of 30 September (item 1). A scramble, an alert for two provinces, a short pause at Lublin and Rzeszów airports, an all-clear. The sentence "no violation was observed" is carried by RMF24. Radio Lublin carries "no threat on Polish territory" and the end of operations.
  • Lithuania. The sirens of 29 September were a drill (item 5). No new intercepts or airport restrictions for 29–30 September were found.
  • Latvia and Estonia. No new airspace violations or airport restrictions for 29–30 September were found. The Milrem attribution (item 2) refers to the fire of 15 August, not to a new strike in this window.
  • The Ādaži training accident received no new hostile reading.

Kaliningrad and Russia's border regions

  • Night into the 29th, the 29th by day, and night into the 30th: the northwest is absent from the lists of 129, 21 and 384 (item 4). The daytime of 30 September is not closed by a full list.
  • The note and NATO's reply (item 3). The embassy's public text says "the entire arsenal". The text dpa says it saw adds nuclear weapons and strikes on decision-making centres. Hart condemns nuclear rhetoric. These are not two identical verbatim texts.
  • Baltic Fleet. No dated exercise in Kaliningrad Oblast for 29–30 September was found.
  • A RIA Novosti report of 29.09 about a multi-hour flight by a US Bombardier ARTEMIS II reconnaissance aircraft near Kaliningrad was not closed by an independent Western tracker in the outlets reviewed. RIA Novosti is an EU-sanctioned outlet — no direct link. The flight is not treated as an established fact.
  • The FSB regime on the Estonian border. No separate note of 29–30 September extending or lifting the previously stated period through 26 September was found. Expiry of the period is not itself treated as a lifting.
  • Belarus. No exercise dated 29–30 September on the Polish and Lithuanian borders was found in non-registry sources.

Statements by officials

  • Poland — Operational Command (30.09): aircraft operated preventively; operations ended by 08:00. The sentence on the absence of an airspace violation is quoted by RMF24. Radio Lublin quotes the end of operations and the centre's all-clear.
  • Estonia — K. Michal (29.09): the Milrem arson on the night of 15 August is, with full confidence, called an act ordered by Russian special services. The evidence is not set out in the release.
  • Estonia — M. Tsahkna (29.09): the chargé was summoned; the sabotage is described as an attempt to reduce support for Ukraine. Casualty figures for strikes on Ukraine in September, present in one ERR article, are not closed by a second independent count and are not treated as established.
  • Russia — D. Peskov (29.09, Postimees): the accusation is unfounded and will not be taken seriously. The verbatim quotation is one outlet; a Reuters agency copy of the same day briefly carries the Kremlin's rejection.
  • NATO — A. Hart (29.09): the note was received, a reply was sent, the alliance is defensive, nuclear rhetoric is condemned.
  • Lithuania — PAGD / LRT: the sirens of 29 September from 11:52 to 11:55 are described by LRT as having taken place. There is no report on failures.
  • No new statement by the Polish defence minister on the morning of 30 September was found in the texts reviewed. No new statement by the Russian defence minister on Milrem or on the morning scramble was found in non-registry sources.

⚠️ Contradictions and discrepancies

  • The 29 September issue is incomplete on the text of the note. The morning issue wrote that no independent text of the embassy statement existed beyond reprints of a state agency. On the afternoon of 29 September, after compilation, Spiegel, citing dpa, published a harder reading of the letter, and Hart confirmed NATO's reply. The 29 September score is not recalculated: the embassy's rhetoric was already part of the basis for 5.1. The correction is logged in corrections.json.
  • "Entire arsenal" and "including nuclear weapons". The embassy's public excerpts in Kyiv Post and yesterday's Kommersant retelling via TASS do not contain the words "nuclear weapons" and "decision-making centres". Those phrases are in Spiegel as the text dpa says it saw. Hart separately condemns "irresponsible nuclear rhetoric": that is NATO's characterisation, not a verbatim match with the embassy's public excerpt. One reading does not replace the other.
  • "No violation was observed" and "no threat". RMF24 quotes the command: no violation of Polish airspace was observed. Radio Lublin quotes the centre's all-clear ("no threat on Polish territory") and the end of operations, but the update reviewed does not repeat the airspace sentence. There is no discrepancy on the fact of the all-clear. The class of event — a scramble without a recorded violation — rests on both outlets; the verbatim air formula rests on RMF24.
  • 129, 21 and 384. The numbers match across pairs of outlets that retell one defence ministry bulletin. That is not two counts. The northwest is absent from three closed windows. The daytime of 30 September is not closed by a full list. Kommersant groups the night into the 30th as "14 regions" plus named republics; BFM gives a name-by-name list. Both have the figure 384, and the northwest is absent from both.
  • Sirens. LRT at 11:58 describes the check as having taken place. The PAGD page remains an announcement. There is no failure count, so "all 1,163 sirens worked" is not asserted.
  • Peskov. The verbatim rejection is in Postimees. A short retelling of the rejection is in a Reuters agency copy of 29.09, with no stable reuters.com page found. The quotation is not treated as two independent transcripts.
  • "The first successful strike this year". It is in an ERR report of the security-service chief's words and is not in the government release. It is not used as a government formula.
  • No other substantive error in previous issues, besides the incomplete description of the 29 September note, was identified. The omissions of the Mi-8 on 23 September, Ādaži and the afternoon of 28 September are already logged.

📊 Escalation risk assessment (0–10): 5.1 / 10

Overall score: 5.1 / 10. Unchanged from the 29 September issue. The nearest historical analogue is a tense late-Cold-War confrontation (≈3–4), with an addition for the drone shot down over Lithuania on 15 September, for strikes a few kilometres from the Polish border in earlier windows, and for nuclear-coloured rhetoric around Kaliningrad. Noticeably below Able Archer 1983 (≈7) and the eve of 2008/2014 (≈6–7): no new violation of NATO airspace was found, the exercises are defensive and announced in advance, and the note is not accompanied by a named redeployment.

Drivers on the Russian side and its ally's:

  • Strikes on Ukraine near the Polish border again produced the morning scramble of 30 September. No violation of Polish airspace was observed in the command statement quoted by RMF24. Radio Lublin records the all-clear. This is the war with Ukraine at the NATO line, not an entry onto alliance territory.
  • The Milrem attribution. On 29 September the Estonian government called the fire of 15 August an act ordered by Russian special services. That is a hybrid act on NATO territory in Tallinn's official assessment, but the fire itself is not in this window, the suspects are in custody, the evidence is not public, and the Kremlin rejects the accusation.
  • The Kaliningrad note. The public text speaks of "the entire arsenal". The dpa reading adds nuclear weapons and strikes on decision-making centres and remains one agency. No troop movement was named alongside the note.
  • Strikes on Russian territory continue. Three closed lists (129, 21, 384) do not contain the northwest. The daytime of 30 September is not closed by a full list.
  • The FSB regime near Narva ran, on the previously stated period, through 26 September. There is no fresh decision to extend or lift it.
  • Belarus: no fresh exercise at the Suwałki Gap.

Drivers on the NATO side and from individual members:

  • The Polish scramble of 30 September is a defensive response to strikes on Ukraine. No weapon use is reported in the accounts available.
  • NATO's reply to the note is a public rejection of the threat and a condemnation of nuclear rhetoric. The reply adds no new troops at the border in these 24 hours.
  • Vyčio skliautas 2026, Namejs 2026 and Perkūno griausmas 2026 continue on previously announced dates. The sirens of 29 September were a scheduled test.
  • The summons of the chargé is a diplomatic response to an arson already committed and under investigation, not a deployment.

Mutual / structural factors:

  • The Russia–Ukraine war as the source both of the morning scramble in Poland and of the overnight lists over Russian territory.
  • The calendar: Saeima elections in Latvia on 3 October, Lithuania's constitutional vote on 6 October, the end of Vyčio skliautas on 3 October.
  • Rhetoric about isolating Kaliningrad and defensive construction on both sides of the border remain structural background; there are no fresh kilometres in the window.

Stabilisers (both sides):

  • The Polish operation ended before 08:00, Lublin and Rzeszów airports reopened, and the Government Centre for Security said there is no threat on Polish territory.
  • No new violations of Lithuanian, Latvian or Estonian airspace were found.
  • The northwest is absent from three closed lists. There is no full list for the daytime of 30 September, and silence is not asserted.
  • The Milrem suspects are in custody, and no new arson is claimed in the window.
  • Hart announces no strike and calls the alliance defensive. The note is not accompanied by a named Baltic Fleet movement.
  • The sirens were a test, not an alert for a real target.
  • No Belarusian exercise at the gap in the window.

Reasoning for the score: holding 5.1 follows from the new facts not changing the class of events. A morning scramble without a recorded violation is the same class that has held the score since mid-September. The Milrem attribution matters as an official assessment of a hybrid act, but the act is dated 15 August, and the window adds no new attack. The dpa nuclear line sharpens the reading of a note that the 29 September issue already counted as hard rhetoric, and it does not match the embassy's public excerpt; there is no troop movement. Closed lists without the northwest remove uncertainty about the night into the 29th and the night into the 30th and add no brush against the NATO line.

Delta from the previous issue: = (0.0) — 5.1 (29 September) → 5.1 (30 September). Reason: a scramble without a violation, the attribution of an August arson, and a discrepancy in the text of the note do not leave the class that already holds the score. The previous issue's incompleteness on the text of the note does not recalculate that day's score.

Caveat: this is an analytical assessment from open sources, not a forecast.

Sources