Coffe Report

| Following conflicts in real-time. Monitoring the situation while I should be studying 🇩🇰
Support me ☕️

[Coffe Report @CoffeReport]

A lot of new people found this account today - thank you so much for following.

I’ll continue to track, report, and get comments on major military and security activity like what we saw today.

Also, a quick plug: I run Grey Zone Europe:
https://t.co/3iHR2pHCTH

It's a small independent project tracking and mapping hybrid incidents, suspicious activity, and security developments across Europe. Any feedback is appreciated!

[Coffe Report @CoffeReport]

🇩🇰 SO, IN JUST THREE WEEKS, IN DENMARK ALONE, WE'VE HAD:

• DTU - OCT 2: Hackers breached Denmark's Technical University and downloaded data. Up to 200,000 people potentially affected.

• CPR REGISTER - OCT 5: Unauthorised access to personal data on 8.8 MILLION people, including Danish national identification numbers.

• LAND REGISTRY - OCT 14: An extraordinary 17.2 MILLION queries in just a few days, accessing publicly available property ownership and mortgage-related records. Authorities warn the information could facilitate fraud.

• AARHUS UNIVERSITY - OCT 21: Hackers breached a server and attempted to compromise approximately 1,700 user accounts. The attempts reportedly failed.

• UNIVERSITY OF COPENHAGEN OCT 23: Hackers gained access to a database containing personal information on approximately 525,000 people, including CPR numbers.

Five major cybersecurity and data-security incidents in three weeks.

At what point do we stop treating these as isolated headlines and start seriously questioning the security of the systems our society depends on?

[Coffe Report @CoffeReport]

🇩🇰 BREAKING: UNIVERSITY OF COPENHAGEN HIT BY MAJOR CYBERATTACK - DATA ON 525,000 PEOPLE EXPOSED.

Denmark's University of Copenhagen (KU) has confirmed that hackers gained unauthorised access to a database containing personal information on approximately 525,000 individuals.

The database includes highly sensitive personal information:

• Full names
• Danish CPR numbers (national identification numbers)
• Private telephone numbers
• Work telephone numbers
• Private email addresses

The attack was discovered on Tuesday, October 20, and has since been brought under control.

The university is still investigating the full extent of the breach, including exactly how much information was accessed or potentially extracted.

The perpetrators and their motives have not been identified.

The disclosure comes just weeks after another major cyberattack against the Technical University of Denmark (DTU), which potentially affected 200,000 people.

[Coffe Report @CoffeReport]

🇳🇱 NEW: DUTCH POLICE INVESTIGATE REPEATED UNIDENTIFIED DRONE ACTIVITY NEAR CRITICAL INFRASTRUCTURE ACROSS GRONINGEN.

Since early October, mysterious drones have repeatedly been spotted around the strategically important port of Eemshaven and three other locations in the northern Netherlands.

The timeline:

• October 3: First reported sightings near Eemshaven.
• October 10–11: Further sightings, reportedly witnessed by police officers themselves.
• October 13: Additional nighttime drone activity.
• October 17–18: Police receive new reports.
• October 20: RTV Noord reports separate sightings around Meeden, Scheemda and Zuidbroek.

What's particularly concerning is the infrastructure located in these areas:
🇳🇱 Eemshaven - LNG facilities, power stations, data centres and a port used for NATO military logistics.
🇳🇱 Zuidbroek - A major natural gas processing facility.
🇳🇱 Scheemda - One of the Netherlands' largest solar farms.
🇳🇱 Meeden - A major high-voltage electricity substation.

Groningen Seaports confirmed that no permits had been issued for the drone flights around Eemshaven.

Dutch police are investigating but have not identified the operators, their intentions or the drones' origin.

Importantly, police have NOT established a connection between the Eemshaven sightings and those elsewhere in Groningen.

[Coffe Report @CoffeReport]

🇸🇪🇩🇰🇳🇦 NEW: SWEDEN JOINS DENMARK IN DEPLOYING AUTONOMOUS SEA DRONES TO MONITOR THE BALTIC SEA.

Sweden has confirmed the deployment of four US-made Saildrone Voyager unmanned surface vessels, supporting NATO's efforts to protect critical undersea infrastructure.

The 10-metre vessels can:

• Monitor maritime traffic around the clock using radar and cameras.
• Cross-check ships against their reported AIS identities and positions.
• Detect and track suspicious maritime activity.
• Operate autonomously for extended periods.

🇩🇰 Denmark has already tested four of the same vessels in the Baltic Sea since June 2025.
During a six-month deployment, the Danish operation:
• Detected over 170,000 unique maritime contacts.
• Covered more than 20,000 nautical miles.
• Achieved 92% fleet uptime.

Notably, neither country purchased the vessels outright.

Instead, both use a contractor-operated model, buying maritime surveillance as a service while Saildrone provides and operates the platforms.

Sweden's agreement covers an initial year, while Denmark has been negotiating a follow-on contract.

The vessels also support NATO's Task Force X Baltic, part of the wider Baltic Sentry initiative established to protect critical undersea infrastructure.

An interesting example of how Nordic countries are expanding persistent maritime surveillance without having to deploy crewed warships around the clock.

[Coffe Report @CoffeReport]

🇵🇱🇷🇺 NEW: POLAND INVESTIGATES SUSPECTED RUSSIAN-LINKED SABOTAGE PLOT AGAINST DRONE FACTORY SUPPLYING UKRAINE.

Polish prosecutors have opened an investigation after a suspected Russia-linked recruiter offered $30,000 to set fire to Flytronic's drone factory in Gliwice, Poland.

The facility belongs to WB Group and produces FlyEye reconnaissance drones used by Ukrainian forces.

The plot was uncovered by investigative journalists from Vot Tak, who infiltrated a recruitment operation on Telegram.

The recruiter, operating under the alias "Joker":

• Initially offered $1,000 to burn cars with Ukrainian licence plates.

• Later offered up to $30,000 to attack the drone factory.

• Provided footage showing apparent reconnaissance of the facility.

• Promised a medal in Belarus for carrying out the attack.

Journalists traced the Telegram account to a Russian phone number registered in the Saratov region.

Poland's Internal Security Agency (ABW) is now investigating the attempted recruitment for sabotage on behalf of a foreign intelligence service.

[Coffe Report @CoffeReport]

🇺🇸🇷🇴🇧🇬 NOW: A US Navy P-8A Poseidon maritime patrol aircraft is operating over the western Black Sea, currently tracked near Constanța, Romania.

The aircraft, registration 170269, departed Varna, Bulgaria, where US maritime patrol aircraft have been deployed following the recent wave of drone attacks on commercial shipping.

The flight comes just hours after the cargo ship KHORYV was struck and sank off Constanța, leaving one sailor dead and three missing.

Bulgaria has confirmed that US Poseidon aircraft are conducting maritime surveillance missions as part of NATO's reinforced presence in the Black Sea.

[Coffe Report @CoffeReport]

🇲🇩🇷🇺 BREAKING: MOLDOVA EXPELS RUSSIAN EMBASSY OFFICIAL AFTER DRONE INCURSION.

President Maia Sandu has announced that a Russian Geran attack drone violated Moldova's airspace and crashed near residential homes and an energy facility.

In direct response, Moldova has declared a member of Russia's embassy staff persona non grata, ordering their expulsion.

“Russia's war keeps putting Moldovan lives at risk,”

[Maia Sandu @sandumaiamd]

Russia's war keeps putting Moldovan lives at risk. Today, a Russian Geran attack drone violated our airspace and fell near family homes and an energy facility.

We condemn this latest dangerous act. In response, we have declared a Russian embassy staff member persona non grata.

[Coffe Report @CoffeReport]

🇲🇩🇺🇦 NEW: Russian attacks are forcing Moldova to move its border operations OFF Ukrainian territory.

Moldova has now withdrawn border guards and customs officers from FOUR joint checkpoints located inside Ukraine, citing the growing danger of Russian strikes near the border.

The withdrawals began in September, but the Moldovan interior minister confirmed this week that they now cover four crossings.

Chișinău is negotiating with Kyiv to relocate Ukrainian border personnel onto Moldovan territory, allowing joint checks to continue away from the most exposed areas.

On October 5, a projectile struck a passenger bus near the Palanca crossing, injuring a Moldovan border guard.

Moldova is also preparing protective shelters for border personnel and civilians.

This is an increasingly visible consequence of Russia's attacks: neighbouring European countries are being forced to reorganise their own border operations to keep personnel safe.

[Coffe Report @CoffeReport]

ICAO hex 3FAA8C (GAF663) is listed as a German CH-53GS Stallion, registration 85+12. Where on ADS-B Exchange before the Sulwalki gap.

Other aircraft flew alongside it, although I haven't independently confirmed the type of every helicopter in the formation; I'm quite certain they are the same.

[Coffe Report @CoffeReport]

🇩🇪🇵🇱🇱🇹 NOW: A formation of German military helicopters appears to be heading towards Lithuania, flying east across Poland.

Germany is currently expanding its permanent military presence in Lithuania as part of NATO's eastern flank reinforcement.

Seemingly Luftwaffe CH-53GS heavy-lift transport helicopters, they are flying together at relatively low altitude.

The formation's exact mission has not been confirmed.

[Coffe Report @CoffeReport]

🇷🇺 BREAKING: AIR TRAFFIC INTO MOSCOW SEVERELY DISRUPTED AMID DRONE ATTACK

All four major Moscow airports - Sheremetyevo, Domodedovo, Vnukovo and Zhukovsky - have suspended arrivals and departures amid reports of drones approaching the Russian capital.

Flightradar24 shows international flights holding over western Russia, with some diverting to Minsk and St. Petersburg.

An air raid alert has also been declared at Sheremetyevo, where passengers have reportedly been evacuated to shelter areas.

Moscow Mayor Sergei Sobyanin claims Russian air defences have intercepted at least 17 drones approaching the capital.

[Coffe Report @CoffeReport]

The reported origin → destination for all eight vessels:

🇺🇦 ROYAD MAMMADOV
Izmail, Ukraine → Ravenna, Italy 🇮🇹

🇪🇬 ALFA WATAN
El Arish, Egypt → Sulina, Romania 🇷🇴

🇷🇴 ABLE
Galați, Romania → Istanbul, Türkiye 🇹🇷

🇹🇷 CHELSEA 3
Giresun, Türkiye → Giurgiulești, Moldova 🇲🇩

🇩🇿 HS DIGNITY
Mostaganem, Algeria → Brăila, Romania 🇷🇴

🇹🇷 YARA J
Türkiye → Sulina/Danube ports (final destination unconfirmed)

🇹🇳 WINE TRADER
Tunisia, via Türkiye → Moldova, via Sulina 🇲🇩

🇹🇷 KHORYV
Erdemir, Türkiye → Sulina, Romania 🇷🇴

[Coffe Report @CoffeReport]

🇷🇴🇧🇬 RUSSIA'S GREY-ZONE WAR AGAINST EUROPE IS RAPIDLY EXPANDING.

EIGHT SHIPS. JUST 19 DAYS.

Since October 5, eight commercial vessels have been involved in serious incidents in the western Black Sea, just off the coasts of NATO members Romania and Bulgaria.

Several were struck by drones. Others caught fire or sank, with some circumstances and attribution still under investigation.

The human cost is staggering:

• 81 sailors reported rescued or safe
• 21 reported missing
• 12–13 reported dead or presumed dead, including 10 presumed fatalities

The latest incident happened TODAY. The cargo ship KHORYV capsized just 13 nautical miles off Constanța, leaving one sailor dead and three missing. Romania has blamed Russia for the attack.
These are civilian ships, carrying civilian crews, operating on the doorstep of NATO territory.

I've mapped all eight incidents from October 5–23, including their reported locations and the human cost.

[Coffe Report @CoffeReport]

🇱🇹 NEW: Lithuania is conducting its largest-ever military commandant exercise, rehearsing responses to sabotage, civil unrest and attacks on critical infrastructure.

Running from October 22–25 in western Lithuania, the drills involve soldiers, armed volunteers, police and emergency services.

Scenarios include:
• Sabotage at Klaipėda’s Draugystė railway junction.
• Riots near the city hall.
• A fire at a critical heating facility.
• Military checkpoints and simulated curfews overnight.

The exercise, “Perkūno bastionas / Juodas vanagas 2026”, is designed to test how military and civilian authorities coordinate during a national security crisis.

[Coffe Report @CoffeReport]

🇦🇹🇷🇺 BREAKING: Austria is expelling FOUR Russian diplomats over suspected espionage.

Three worked at the Russian Embassy in Vienna, while the fourth was attached to Russia’s OSCE delegation for military security and arms control.

Austria says the decision followed findings by its security services concerning activities incompatible with diplomatic status.

This brings the total number of Russian diplomats expelled by Austria to 18 since 2020.

[Coffe Report @CoffeReport]

🇩🇰 UPDATE: Danish authorities have ordered additional security measures at Copenhagen Airport following a regulatory inspection.

The Danish Civil Aviation and Railway Authority told public broadcaster DR that its inspection identified issues requiring the airport to temporarily implement additional passenger screening procedures.

The measures have caused significant queues and are expected to continue throughout the weekend.

Authorities have not disclosed the specific findings.

There is currently no confirmed link to a specific security threat.

[Coffe Report @CoffeReport]

🚨🇩🇰 BREAKING: Copenhagen Airport has introduced extraordinary security checks for ALL departing passengers, causing massive queues.

The airport confirmed the heightened security procedures to Danish broadcaster DR and has called in additional staff to handle the disruption.

The measures are expected to remain in place throughout the weekend.

The reason for the additional security measures has not yet been disclosed.

[Coffe Report @CoffeReport]

@SeshSad Yeah, officials have confirmed that "the consequences of the security checks were felt as early as yesterday".

Still no official explanation - normally, security at Copenhagen is quite strict. Either my bag or I get pulled for inspection EVERY, SINGLE, TIME.

[Coffe Report @CoffeReport]

🚨🇩🇰 BREAKING: Copenhagen Airport has introduced extraordinary security checks for ALL departing passengers, causing massive queues.

The airport confirmed the heightened security procedures to Danish broadcaster DR and has called in additional staff to handle the disruption.

The measures are expected to remain in place throughout the weekend.

The reason for the additional security measures has not yet been disclosed.

[Coffe Report @CoffeReport]

🇩🇪🇸🇪🇪🇸 NEW: Germany could pursue a new European fighter jet programme with Sweden and Spain, potentially bringing Airbus and Saab together.

According to internal German Defence Ministry documents obtained by POLITICO, officials recommend pursuing a German-Swedish-Spanish partnership rather than joining the UK-Italian-Japanese GCAP programme.

The proposal includes:

• A potential Airbus–Saab joint venture to develop a next-generation fighter.

• Using technology from Saab's Gripen E as a possible foundation.

• Giving Germany, Sweden and Spain greater control over development, technology and industrial responsibilities.

The recommendation follows the collapse of Germany's fighter jet cooperation with France earlier this year.

No final political decision has been made, and no Airbus–Saab agreement has been signed.

[Coffe Report @CoffeReport]

🇬🇧🇨🇿🇷🇺 UPDATE: Following today's SECOND RAF Rivet Joint surveillance flight around Kaliningrad, a NATO MRTT tanker and, notably, a Czech Air Force JAS 39 Gripen have also been spotted operating near the Kaliningrad FIR.

Quite a concentration of allied aircraft over the southern Baltic today.