The Hole in the Roof: A Russian Drone Hits Romania and NATO Faces a Question It Has Been Avoiding
GALAȚI, Romania — There is a hole in the roof of a ten-storey apartment block in the Stirex-Mazepa neighborhood. The hole is about a metre wide. Around it, the brickwork is charred. Blue plastic sheeting now covers the gap, flapping in the wind off the Danube. Below, on the tenth floor, a flat has been torn open. The family who lived there is staying with relatives.
What made this hole was a Russian Geran-2 drone — the Iranian Shahed-136, rebadged in Cyrillic — carrying roughly forty kilograms of high explosives. It entered Romanian airspace at 1:54 on May 29, 2026, flew for four minutes over the territory of a NATO member state, and detonated on a civilian building. Two people were wounded: a woman and a child. Around seventy residents were evacuated. The war in Ukraine, now in its fifth calendar year, had done what it had spent four years threatening to do — struck a NATO country’s civilian infrastructure with a live warhead, not debris, not fragments, but an armed drone on a direct course.
The Romanian Defence Ministry, in a statement notable for its brevity and its fury, confirmed that the drone had been tracked by radar systems after crossing from Ukraine. It was part of a wave of 232 drones and one ballistic missile that Russia launched against Ukrainian targets that night — a mass bombardment aimed primarily at the Danube port cities of Reni and Izmail, which lie just across the river from Romania. Ukraine’s air force claims to have shot down 217 of those drones. One of the ones they missed kept flying, crossed a NATO border, and punched a hole in a block of flats.
At 01:19, roughly half an hour before the impact, two Romanian F-16 fighter jets had scrambled from the 86th Air Base at Fetești, an hour’s drive south of here. They were accompanied by an IAR 330 SOCAT helicopter. The pilots had authorization to engage targets — meaning they had permission to shoot down the drone if they could find it in time. They did not find it in time. The drone was tracked on radar, but a Geran-2 is a small, slow, low-flying thing, built to evade detection, and by the time the jets were airborne and searching, it was already descending over Galati. The pilots spent the night circling empty sky while a building burned.
This is the first fact worth holding onto: the F-16s were scrambled, they were armed, they had permission to fire, and they could not stop it. The second fact is this: the drone that hit the building was not debris. It was not a fragment. It was not wreckage from something that had been shot down over Ukraine and drifted across the river. It was a functioning munition, carrying a warhead, navigating under its own power, that flew into Romanian airspace and completed its mission. Romania’s Defence Ministry has counted fragments of Russian drones on its territory 47 times since the war began. Until Friday, those were pieces of things that had already exploded. This one exploded where it was supposed to.
What It Means
The word “escalation” is used so often in this war that it has lost most of its meaning. But this incident is different from the others, and it is worth being precise about why.
A Russian weapon has hit a civilian building in a NATO country. Two NATO citizens have been wounded by that weapon. The weapon was not a stray; it was part of a coordinated attack on Ukrainian infrastructure, which means Russian forces planned the flight paths, launched the drones, and either did not care or did not notice that one of them was going to fly into another country’s airspace and hit a residential area. The Romanian government called it a “grave and irresponsible escalation,” which is diplomatic language for “this should not have happened and we are not sure what to do about it.”
NATO’s response so far has been careful. Mark Rutte, the NATO Secretary General, said the alliance is “ready to defend every inch of allied territory.” He called Russia’s behaviour “reckless” and a “danger to us all.” These are strong words, but they are still words. Romania’s Foreign Minister, Oana Țoiu, has said the incident could justify invoking Article 4 of the NATO treaty — the clause that allows any member state to call for consultations when it feels its territorial integrity is under threat. Article 4 is not Article 5. Article 5 is the one that says an attack on one is an attack on all. Article 4 is the one where everyone meets and talks about what Article 5 might mean.
The question that nobody is answering directly, but that everyone is thinking, is whether this qualifies as an attack. For four years, the line has been drawn at “debris” and “fragments” — bits of metal falling out of the sky after Ukrainian air defence has done its work. That line has now been crossed. A Russian Geran-2 with its warhead intact struck a building in a NATO country and injured people. If that is not an attack in the military sense, it is certainly an attack in the literal sense: one state’s armed forces sent a weapon into another state’s airspace and that weapon hit something.
The Other Side
Vladimir Putin has offered an alternative explanation. Speaking on Friday, he said the drone was “likely Ukrainian” and accused Romania of jumping to conclusions. “No one has provided proof that this drone came from Russia,” he said, which is technically true only if you ignore the flight path data, the radar tracks, the fragments of Russian-manufactured drone recovered from the building, and the fact that Russia had just launched 232 drones at Ukrainian targets less than twenty kilometres away.
The Kremlin’s line is familiar: it was not us, and if it was us, it was an accident. This is the same playbook Russia has used every time its drones have drifted into NATO airspace — and they have drifted in many times. Poland has scrambled jets. Estonia has scrambled jets. Romania has scrambled jets. NATO has issued statements. The drones keep coming, and each time the line moves a little further.
The difference this time is the civilians. A woman and a child. Minor injuries, the authorities say. But what if the drone had hit the building an hour earlier, when people were awake and the flats were full? What if it had hit the ground floor instead of the roof? What if the warhead had been larger? These are the questions that Romania’s allies are now asking, and the answers are not comfortable.
The Geography of the Thing
Galati is not a random target. It sits on the Danube River, roughly fifteen kilometres from the Ukrainian border, directly across from the Ukrainian port of Reni. Russia has been systematically destroying Ukraine’s Danube port infrastructure for years, trying to strangle the grain export routes that Ukraine uses as an alternative to the Black Sea ports. The drones fly in waves, following the river, using it as a navigation landmark. The Danube here is the border between Romania and Ukraine, but borders drawn on maps do not mean much to a drone flying at low altitude with a pre-programmed course. The margin for error — if you want to call it error — is measured in seconds of flight.
Romania has known this was coming. For months, the government has been asking NATO for more anti-drone capabilities, more air defence, more presence on the eastern flank. Germany’s Chancellor Merz said afterwards that “we need a strong NATO presence on the eastern flank.” Romania has formally requested allied anti-drone systems be deployed. Better late than never, but the timing has a bitter edge.
The Bottom Line
This changes the risk profile of the war in a way that diplomats will spend the next weeks trying to define and the next months trying to contain. For four years, the implicit bargain has been that the war stays in Ukraine. There have been spillovers — missiles in Poland, drones in Romania, stray munitions in Belarus — but they have been treated as accidents, as exceptions, as things that happen when a big war is fought next door to countries that are not in it. That bargain was always fragile. A Geran-2 carrying explosives into a Romanian apartment building does not break it, but it puts a crack in it that is visible from every capital in Europe.
What happens next depends on what NATO decides the word “attack” means. If this is an attack, then Article 5 applies, and the alliance is obliged to respond. If this is not an attack, then Article 4 applies, and the alliance will consult. If this is neither, then NATO will issue another statement, Romania will expel another diplomat, and the drones will keep flying, because nothing has changed to stop them. The F-16s were scrambled. They had permission to engage. They did not shoot the drone down, because they could not get to it in time. That, more than any statement from Brussels, is the truth of the situation. The hole in the roof is still there. The plastic sheeting flaps in the wind. And nobody in Galati feels safe any more.