In April 2026, Russia's Ministry of Defence published a list of addresses — not military bases, but factories in ordinary European cities across the UK, Germany, the Netherlands, Denmark, Latvia, Lithuania, Poland, Czechia, Spain, Italy, Türkiye, and Israel, identified as sites making drones for Ukraine. Dmitry Medvedev, deputy chairman of Russia's Security Council, called the list "a register of potential legitimate targets for the Russian armed forces." The list is real. So is the shift it's responding to: Europe has moved from writing checks for Ukraine's drone war to building the drones on its own territory, with its own money.
The money that moved from checks to factories
On July 15, 2026, European Commission President Ursula von der Leyen and Ukrainian President Volodymyr Zelensky signed a bloc-wide defense-industrial partnership — the "Drone Deal" — targeting joint EU-Ukraine drone and counter-drone production by the end of 2026, with 19 founding companies including Indra and Fincantieri on the European side. It draws on the EU's €90 billion Ukraine Support Loan (roughly €60 billion for defense procurement) and the €150 billion SAFE common-borrowing facility adopted in 2025. The Commission disbursed €1 billion for drones the day the deal was signed, on top of a €3.9 billion payment released June 30 as the first tranche of a roughly €6 billion drone-funding package. This is money that builds facilities inside EU member states, not just weapons shipped across a border.
The strike that reached 2,700 kilometers
On July 6–7, 2026, Ukrainian drones struck Russia's largest oil refinery, at Omsk in western Siberia — about 2,700 kilometers from Ukrainian-held territory, one of the war's longest-range strikes. The refinery accounts for roughly 10 percent of Russian oil-refining capacity. The weapon was an upgraded FP-1, built by the Ukrainian firm Fire Point, which described the strike as a world record for strike-drone range. The Omsk refinery had been one of only two top-ten Russian refineries never previously hit by a Ukrainian drone.
Fire Point is not a clean success story, and this desk isn't going to present it as one. Since late April 2026, leaked recordings published by Ukrainska Pravda have tied Fire Point to Timur Mindich — a businessman and close associate of President Zelensky, reportedly known within Ukrainian political circles as "Zelensky's wallet" — as the company's undisclosed majority owner. Mindich was separately charged in Ukraine's largest corruption case of Zelensky's tenure, involving alleged kickbacks worth roughly $100 million tied to state nuclear operator Energoatom and defense-sector contracts; he reportedly fled to Israel after being tipped off ahead of a raid. A Ukrainian government audit found Fire Point overcharged the defense ministry nearly €15 million on a no-bid FP-1 contract, and the defense ministry's own internal anti-corruption watchdog has called for the company to be nationalized. Separately, Fire Point's own co-owner told media in May 2026 that Denmark had quietly halted the company's planned rocket-fuel plant near Skrydstrup; the Danish government has publicly denied this, saying the project — for which Denmark's parliament passed a law setting aside more than twenty existing regulations — was never suspended, with partial production still targeted for late 2026. The company that built the drone that reached Omsk is, simultaneously, the subject of an active nationalization push inside its own government.
The factory that isn't marked
Not every piece of this production is contested. The New York Times reported July 11, 2026 that Helsing SE, a Munich-based defense startup, is mass-producing its HX-2 attack drone — a 12-kilogram, AI-guided unit reported to cost about €17,500 each, with a range of roughly 62 miles and reported resistance to electronic jamming — at an unmarked German facility employing about 100 people under strict confidentiality, designed to be dismantled and relocated within 24 hours if it's ever identified as a target. Helsing's co-CEO told the Times roughly 70 percent of its deployed drones in Ukraine have completed their missions. The facility's namelessness is the company's own answer to the Medvedev list: nothing to publish an address for.
What the spillover has already cost, before anyone struck on purpose
The war's accidental edge has already reached NATO territory multiple times. In September 2025, 19–23 Russian drones crossed into Polish airspace in a single night; NATO shot several down — the alliance's first shots fired in the war — and Poland invoked Article 4. NATO launched Operation Eastern Sentry days later to reinforce the eastern flank. Romania has logged at least 28 drone incursions since 2022, 15 of them in 2026 alone, per the Institute for the Study of War. And in May 2026, Latvia's government partially collapsed after two suspected Ukrainian drones — believed diverted by Russian electronic warfare — crossed into Latvian airspace, one crashing at a fuel-storage facility; Latvia's defense minister resigned first, followed days later by Prime Minister Evika Siliņa. None of these incidents were deliberate Russian strikes on the production layer described above. They are the accidental version of exactly the exposure Medvedev's list threatens on purpose.
NATO's own response has a number attached: at the alliance's July 7, 2026 Ankara summit, members pledged more than $40 billion over five years for counter-drone capabilities, including a fivefold increase in trained drone operators by 2027 and a NATO-vetted counter-drone equipment marketplace. That commitment is aimed at the battlefield and the homeland threat generally — it is not, as of this writing, tied to defending any specific named production site on the Medvedev list. Related coverage →
No evidence here establishes that Russia has struck, or currently intends to strike, any specific European drone-production site named on the Medvedev list. The list is documented; a deliberate Russian attack on any named site is not, as of this writing.
The relationship between Timur Mindich's ownership of Fire Point and the specific technical quality or corruption exposure of the FP-1 drone used at Omsk is not established — the corruption allegations concern contract pricing and ownership disclosure, not whether the weapon itself functions as claimed.
Whether Denmark's Vojens rocket-fuel plant is proceeding on schedule is disputed between Fire Point's own co-owner and the Danish government; this desk is presenting both claims rather than resolving which is accurate.
Whether any of the Polish, Romanian, or Latvian drone incursions were deliberate Russian provocations, unintentional diversions of Ukrainian drones by Russian electronic warfare, or some mix of both is contested between Ukrainian and Russian accounts; this desk is not adjudicating that dispute here.