GERMANY HOLDS TWO TEENAGERS ACCUSED OF TORCHING STARLINK ANTENNAS IN BULGARIA

German authorities are holding two 19-year-old nationals while a Düsseldorf court considers Bulgaria’s request to extradite them over an alleged arson attack on Starlink antennas near Sofia. Bulgarian prosecutors say the suspects entered from Serbia on October 9, spent only several hours in the country and later returned to Serbia after allegedly setting fire to equipment at the Plana Teleport facility. Three antennas were completely destroyed, two were partially burned and three others sustained damage. The allegations have not yet been proven in court.
German authorities are holding two 19-year-old men accused by Bulgarian prosecutors of deliberately setting fire to Starlink satellite communications equipment near Sofia, as a court in Düsseldorf considers whether they should be extradited to Bulgaria to face charges over the alleged attack.
German prosecutors confirmed on Wednesday, October 28, that the two German nationals were arrested last Friday and remain in detention pending a decision on Bulgaria’s extradition request. The men, residents of Duisburg and nearby Moers, are wanted under European arrest warrants issued after Bulgarian investigators accused them of setting fire to Starlink antennas at the Plana Teleport facility south of the Bulgarian capital.
The allegations have not been proven in court, and the two suspects are entitled to the presumption of innocence. German judicial authorities are now considering whether the legal conditions for surrendering them to Bulgaria have been met.
Bulgarian prosecutors allege that the two entered the country from Serbia on October 9 in a vehicle with German registration plates, told border authorities that they were visiting for tourism and remained in Bulgaria for only a matter of hours before returning to Serbia.
Investigators say the men traveled to the Plana facility later that evening and deliberately set fire to Starlink equipment before leaving Bulgaria. Bulgarian authorities subsequently identified the suspects and sought their arrest through the European warrant system.
According to evidence presented by prosecutors in Sofia, three Starlink antennas were completely destroyed in the fire, two were partially burned and another three sustained fire damage. Bulgarian media reports said investigators obtained photographs, vehicle-tracking information, witness statements and an expert assessment of the damaged equipment.
The Sofia City Court approved European arrest warrants for the two men on October 19. Bulgarian prosecutors charged them in absentia while authorities sought their location outside the country.
The suspects were arrested in Duisburg on October 23 after German authorities acted on the warrants. Bulgarian prosecutors subsequently said Germany was also carrying out a European Investigation Order intended to gather additional evidence relevant to the case.
A spokesperson for prosecutors in Düsseldorf told Reuters that one of the men lives in Duisburg and the other in Moers, both cities in western Germany. The court must now decide whether the pair can be transferred to Bulgaria under European extradition procedures.
Bulgaria’s Interior Minister Ivan Demerdzhiev said he expects the suspects to be handed over to Bulgarian authorities. He also said the two were suspected of involvement in a similar act in another European Union member state, although he did not publicly identify the country or provide details supporting that allegation.
That additional claim has not been independently established in the reporting available so far, and German authorities have not publicly announced separate charges connected to another alleged attack.
The Bulgarian case has attracted attention well beyond the value of the damaged telecommunications equipment because Starlink has become strategically important in the war in Ukraine.
SpaceX’s satellite internet system has been used extensively by Ukrainian forces for battlefield communications since Russia’s full-scale invasion in 2022. Starlink terminals have enabled troops to maintain internet connectivity in areas where conventional telecommunications infrastructure has been destroyed, disrupted or jammed.
Ukraine has also used satellite connectivity in connection with drone operations and other military systems. Reuters noted that Starlink receivers are installed in many Ukrainian drones as part of their communications and guidance architecture.
The strategic importance of the technology has made attacks on Starlink-related infrastructure particularly sensitive in European countries supporting Ukraine.
Bulgarian authorities have described the October 9 incident as deliberate sabotage rather than an accidental fire. Plamen Tonchev, head of Bulgaria’s State Agency for National Security, said investigators were working on the assumption that the attack was intentional and warned that similar acts could not be ruled out.
No public evidence has yet established who, if anyone, may have directed the suspects or what their alleged motive was.
That distinction is important because similar attacks elsewhere in Europe have generated accusations involving Russian-linked sabotage networks. Polish and Lithuanian authorities have investigated fires and attacks on infrastructure that they have linked to alleged Russian efforts to disrupt Western support for Ukraine.
Russia has denied accusations that it directs sabotage operations across Europe and has described such claims as politically motivated or anti-Russian.
Bulgarian investigators have not publicly established in this case that the two men were acting on behalf of Russia or any other foreign government.
The Starlink facility targeted near Plana is situated in a mountainous area south of Sofia. Bulgarian reporting described it as containing multiple gateway antennas connected to SpaceX’s satellite communications network.
Gateway facilities form part of the ground infrastructure that connects satellite networks with terrestrial internet systems. Damage to individual antennas can therefore have operational significance beyond the physical cost of the equipment itself, depending on the role of the site and available network redundancy.
Bulgarian authorities said a total of 18 antennas were located at the facility and that eight sustained some level of fire damage during the alleged attack. Three were destroyed completely, two were partly destroyed and three were otherwise affected.
Prosecutors also said there had been a danger that the fire could spread to the facility’s administrative building.
Investigators allege that the suspects wore face coverings and gloves while carrying out the attack. Surveillance footage and tracking of the German-registered vehicle were cited among the evidence used to identify them.
The two men allegedly crossed into Bulgaria through the Kalotina border checkpoint at about 5:37 p.m. on October 9. The fire was reported later that night at approximately 10:25 p.m., after which the suspects are accused of returning toward Serbia.
Their short stay in Bulgaria has become one of the most notable elements of the prosecution’s case because investigators allege that the entire operation, from entry into the country to departure, was completed within only several hours.
Bulgarian authorities subsequently charged both men with complicity in aggravated arson.
If convicted under Bulgarian law, they could face prison terms ranging from three to 12 years, according to reports citing the Bulgarian state news agency.
Their extradition from Germany is not automatic. German courts must review Bulgaria’s European arrest warrants and determine whether the legal requirements for surrender are satisfied.
European arrest warrants are designed to simplify extradition between European Union member states by replacing traditional diplomatic extradition procedures with a judicial process based on mutual recognition of national court decisions.
Germany can nevertheless examine issues including identification of the suspects, the nature of the alleged offenses and whether procedural safeguards have been met.
If extradition is approved, the men would be transferred to Bulgarian authorities to face proceedings in Sofia.
The investigation in Bulgaria is continuing regardless of the extradition timetable. Prosecutors say they are gathering additional evidence through cooperation with German authorities and examining the suspects’ movements before and after the October 9 incident.
Bulgarian officials have also looked into their previous activities. Interior Minister Demerdzhiev said the men had earlier criminal records involving matters such as robbery and road traffic offenses, although those previous cases are separate from the Starlink allegations and do not establish guilt in the current investigation.
The case comes as European governments increase attention on potential sabotage, espionage and infrastructure attacks linked to the wider confrontation between Russia and Western countries supporting Ukraine.
Railways, communications networks, military facilities, warehouses, energy infrastructure and defense-related businesses have all become areas of heightened security concern.
European intelligence agencies have warned that relatively small-scale acts of vandalism or arson can have strategic consequences when they target systems connected to military logistics or communications.
Starlink occupies an unusual position within that landscape because it is a privately owned commercial satellite service that has nevertheless become deeply integrated into Ukraine’s military communications.
The service was developed by Elon Musk’s SpaceX and uses a large constellation of low-Earth-orbit satellites to provide broadband internet connections through ground terminals.
Ukraine adopted the system rapidly after the 2022 Russian invasion damaged conventional communications infrastructure. Thousands of terminals were subsequently supplied or funded by governments, private organizations and SpaceX itself.
The network has since become an important element of military coordination, particularly for frontline units operating in areas where mobile networks or fiber connections are unavailable.
Ukraine has also incorporated satellite connectivity into drone operations, making Starlink-related systems increasingly relevant to modern battlefield technology.
That military use does not mean every Starlink facility in Europe is itself a military installation, and Bulgarian officials have not publicly said that the Plana site was exclusively dedicated to Ukrainian defense operations.
The strategic significance of the network, however, helps explain why the alleged attack has drawn scrutiny beyond Bulgaria.
The investigation also comes amid several separate European cases involving alleged attacks on Starlink equipment.
In Poland and Lithuania, authorities have investigated incidents involving burned satellite antennas and have raised concerns about possible links to wider sabotage operations.
Those cases have increased pressure on governments to determine whether attacks are isolated criminal acts or coordinated attempts to disrupt infrastructure associated with Western support for Ukraine.
No such conclusion has yet been established publicly in the Bulgarian investigation.
The identities of the suspects were reported by Bulgarian media as Zeka Islam and Tirpan Beytula. Both were born in Germany in 2007 and were 19 at the time of their arrests.
Because criminal proceedings are ongoing, allegations against them remain claims by prosecutors rather than judicial findings.
The German detention decision therefore represents an interim legal step rather than a determination of guilt.
The central question before the Düsseldorf court is whether Bulgaria’s extradition request meets the requirements necessary for the suspects to be surrendered.
If that occurs, the focus will shift back to Sofia, where prosecutors will have to prove not only that the two men were present at the scene but that they deliberately participated in setting the equipment on fire.
Investigators will also face pressure to clarify motive.
At present, there is no publicly established explanation for why two 19-year-old German residents would allegedly enter Bulgaria for only several hours, travel to a telecommunications facility and set Starlink equipment on fire before leaving the country.
That unanswered question is likely to determine whether the incident remains a conventional arson prosecution or develops into a broader security investigation.
Bulgarian authorities are examining the suspects’ past movements and contacts, while cooperation with German investigators could provide evidence from phones, digital accounts, vehicles or other material obtained after their arrests.
Until that work is completed, claims of foreign direction or a connection to wider sabotage networks remain unproven.
What is confirmed is that two young German nationals are in custody, Bulgaria has requested their extradition, and prosecutors accuse them of intentionally damaging Starlink equipment near Sofia on October 9.
The case will now proceed through parallel legal processes in Germany and Bulgaria. Germany must decide whether the men should be surrendered, while Bulgarian investigators continue collecting evidence and determining whether anyone else was involved.
Because Starlink has become closely associated with Ukraine’s wartime communications, the outcome will also be watched by European security agencies seeking to understand whether attacks on the network represent isolated incidents or part of a wider pattern targeting infrastructure linked to the war.


