Weekly Security Brief

Bulgaria

September 28, 2026GeoBit Threat Rank #167 · Score 6
Bulgaria sub-national risk map
Sub-national composite risk — darker = higher. Source: GeoBit.
⬇ Bulgaria dataset (CSV) — events, per-region risk, cyber & sources

Situation Summary

Bulgaria remains a low-threat environment (global rank #167, composite score 6) with no discrete security events escalating to national concern during the reporting period. However, the week saw a cluster of localized public order incidents, politically motivated protests, and minor crime activity concentrated in Sofia and surrounding provinces, alongside parliamentary attention to suspected hybrid threats against domestic arms manufacturing. The overall trajectory remains stable, with risk concentrated in major urban centers rather than indicating systemic instability.

Key Developments

Highest-Risk Areas

Sofia-City (risk 72) and Plovdiv (risk 68) drive the majority of recorded risk, followed by coastal centers Varna (65) and Burgas (62). This week's incidents—vigilante gatherings, protests, and public-order responses—all clustered in Sofia-City and Sofia Province, reflecting the concentration of political activism, larger populations, and police reporting density in the capital region. Coastal and secondary cities (Varna, Burgas, Ruse) maintain elevated baseline risk reflecting port activity, transient populations, and organized-crime exposure, but no acute events materialized in those zones during the reporting period.

How GeoBit Would Assist

Security teams with personnel or assets in Bulgaria should deploy AOI Monitoring & Early Warning on Sofia-City, Botevgrad, and Plovdiv to track protest activity and public-order incidents in near-real time, paired with OSINT fusion across local news, police bulletins, and social-media sentiment to anticipate politically motivated gatherings. Intel Sweep and multi-language search capabilities enable continuous monitoring of parliamentary and defense-sector developments (e.g., EMCO sabotage allegations) that may signal broader instability or supply-chain risk.

7-Day Outlook

Near-term risk remains localized and event-driven rather than systemic. The scheduled September 28 Presidency protest and ongoing civil unrest around the Petrohan deaths suggest continued low-level political activism through early October. No indicators suggest escalation to widespread civil disorder or infrastructure attack, though vigilante mobilization (Botevgrad, September 27) warrants continued watch for community-level tensions.

Highest-Risk Areas — Ranked

#State / RegionRisk
1Sofia-City72
2Plovdiv68
3Varna65
4Burgas62
5Sofia58
6Ruse55
7Stara Zagora52
8Sliven50
9Shumen48
10Razgrad47
11Yambol45
12Dobrich44

Previous Weekly Briefs

A new Bulgaria brief is written every Monday, covering the week — each with its own risk map and downloadable CSV. Use the calendar to go further back.

📅 Browse past briefs by calendar →

Highlighted days have a brief. Tap a day for that day's map & analysis, or “csv” for that day's dataset ($5).

June 2026
SMTWTFS
123456789101112131415161718192021222324252627282930
July 2026
SMTWTFS
12345678910111213141516171819202122232425262728293031
August 2026
SMTWTFS
12345678910111213141516171819202122232425262728293031
September 2026
SMTWTFS
123456789101112131415161718192021222324252627282930
⬇ Download PDF
See Bulgaria live.
GeoBit maps Bulgaria — every region, event, and risk layer — on demand.
Request a live demo →
Share this intelligence
X LinkedIn Reddit Facebook WhatsApp Telegram Email Copy link

Atlas — our AI intelligence desk — emails them this snapshot personally. Nothing else, no list.

Automated by GeoBit AI from publicly reported events and open-source research. Context only; not a risk advisory. Recognized by Deloitte · NVIDIA Inception · Geospatial World Forum.

Email me the brief

Enter your email — we'll send it over.

Need this done for your sites?

Start with one product on Bulgaria.

This brief is the free weekly read. If Bulgaria matters to your people or sites, GeoBit analysts will do the specific piece of work you need, on a date, or watch your sites there around the clock. Pick one, tell us where and when, and a person comes back with a scope, a date and a quote within one working day.

Risk assessmentBulgaria · quote within one working dayThreat assessmentBulgaria · quote within one working daySecurity assessmentBulgaria · quote within one working dayOne month of the watchBulgaria · quote within one working day
Or hire the person: a named analyst on your channels from the next business day →