← All Incident Reports
Incident report · TESSOC: Espionage
Aerial reconnaissance - military airfield

Williamtown: drones over Australia's F-35 base, and the blinds came down

Multiple drones entered restricted airspace over RAAF Base Williamtown across several nights in July, and again in early August. The base holds most of Australia's F-35A fleet and its E-7A Wedgetail early-warning aircraft.

None was intercepted, identified, brought down or recovered. Personnel were reportedly told to close the window blinds, the matter was referred to the state police, and as of 20 August nobody has been arrested or charged.

↓  Download one-page brief (PDF)
Who
Operator: unidentified. No arrests and no charges as of 20 August, and no public evidence linking the incursions to any state. Investigated by the New South Wales Police Counter-UAS Unit with the Australian Defence Force. Casualties: none.
What
Multiple confirmed uncrewed aircraft in restricted airspace over the base and the adjacent civil airport across several nights, with a second incursion the following month. No counter-drone weapon was used, no aircraft was recovered, and neither the type nor the launch point is established.
Where
RAAF Base Williamtown, about 30 km north of Newcastle, New South Wales - Australia's principal fighter training base, home to most of the F-35A fleet and to the E-7A Wedgetail. Newcastle Airport operates from the same site under lease.
When
The confirmed incursions ran 11 to 13 July 2026. Police confirmed a second incursion in early August. The police investigation was completed around 10 August and its findings have not been disclosed.
Why
Unexplained and unattributed. A drone-warfare specialist has publicly identified the possible purposes as intelligence gathering, testing detection and response, or preparation for a later attack; none of these has been established.
How
Drones flown into restricted airspace over multiple nights. The response ran through the civil police counter-drone unit rather than any capability held at the base, and the reported protective measure was closing the blinds.
What happened
Central Coast Richmond Maitland Singleton Muswellbrook Taree Scone Forster-Tuncurry Newcastle Sydney NEW SOUTH WALES RAAF Williamtown F-35A and E-7A fleet; drones 11-13 Jul Newcastle Sydney RAAF BASE WILLIAMTOWN, NEW SOUTH WALES Australia’s principal fighter base, co-located with a civil airport 100 km N Schematic. Boundaries and transport: Natural Earth 1:10m, public domain.
1

11 to 13 July - multiple confirmed aircraft

Multiple uncrewed aircraft are confirmed in restricted airspace over the base and Newcastle Airport across three days. The Defence Department later acknowledges the reports and the defence industry minister confirms that the accounts of the number of drones and the days involved are accurate.

2

The response

No counter-drone weapon is employed. Reports are referred to the New South Wales Police Counter-UAS Unit, and personnel are reportedly instructed to close window blinds to prevent sensitive information being seen or photographed.

3

10 August - an investigation completed, findings withheld

The minister states that the police investigation has been completed but does not disclose its findings, and declines to say whether the activity disrupted military or civilian flying or what counter-drone measures, if any, were used.

4

Early August - it happens again

Police confirm a second incursion within the following month. As of 20 August no one has been arrested or charged in relation to either episode.

5

The response after the fact

The government points to counter-drone investment and has amended defence regulations to permit personnel to seize or destroy drones over bases - which is an acknowledgement that they previously could not.

Impact
Human
None. No casualties, no damage and no confirmed disruption to flying.
Capability
The substantive effect. Repeated incursions over the country's primary fifth-generation fighter base were neither detected in time to act, nor identified, nor stopped, across two separate episodes a month apart.
Protective
The reported mitigation was closing the blinds, and the responding organisation was a state police unit. Whatever else that indicates, the base itself had no means of answering the problem.
Deterrence
Penalties for breaching the restricted airspace run to about A$18,200 in court, or an infringement notice of A$1,820. That is the sanction attached to flying uninvited over the F-35 fleet.
The base, the response and the wider pattern
The site

Fighters and a civil airport on one field

Williamtown is Australia's premier fighter training base and holds most of the F-35A fleet and the E-7A Wedgetail. Newcastle Airport operates from the same site under lease, so any response has to account for civil traffic and civil airspace users on the same ground.

11-13 Jul 2026

The first incursion

Multiple confirmed uncrewed aircraft in restricted airspace across three days, first reported in the Australian press and subsequently acknowledged by Defence.

Early Aug 2026

The second

A further incursion confirmed by New South Wales Police, with no arrests or charges as of 20 August.

2026

The same pattern across the NATO area

Comparable unattributed incursions over military and aviation sites this year include Mechernich, Hanover, Leipzig/Halle and Lakenheath. The template is not regional.

The detail that will be remembered is the blinds, and it deserves to be read carefully rather than only as an embarrassment. Closing them was a rational act by people with no other option available to them, which is precisely the finding: the protective measure was the one the occupants could perform themselves, because nothing at the base could reach the aircraft overhead.

Assessment
1

Repetition is what separates this from a nuisance

A single drone over an airfield is ambiguous. Multiple aircraft across several nights, followed by a further episode a month later, is a pattern of behaviour. It is a realistic possibility that this was deliberate reconnaissance or a test of detection and response rather than hobbyist flying, given the repetition and the target selection, but no evidence linking it to any state has been made public and it remains unattributed.

2

Answering with civil police is the structural finding

The reports went to a state police counter-drone unit. Police can investigate an operator and prosecute a breach of airspace regulations; they cannot defend an airfield in the moment. Where the response to an incursion over a military base is a criminal investigation, the incursion has already succeeded in anything it set out to do that night.

3

The blinds are the honest measure of what was available

Instructing personnel to close window blinds is a sensible way to deny a camera a view of classified activity and it is the only measure reported. The regulatory change since - permitting personnel to seize or destroy drones over bases - is an explicit acknowledgement that the standing posture did not allow it. The gap was legal as much as technical.

4

The penalty is not proportionate to the target

A maximum court-imposed penalty around A$18,200 for flying in restricted airspace applies whether the airspace covers a quarry or the national F-35 fleet. Deterrence calibrated to nuisance flying will not deter deliberate reconnaissance, and it is likely that any actor weighing this operation regarded the legal risk as negligible.

5

This will recur, here and elsewhere

The method is cheap, the target is fixed and published, the response has been demonstrated to be slow, and the same pattern has run across Europe throughout the year. It is highly likely that further incursions occur over Australian defence sites, and likely that they continue until a base-organic detection and engagement capability exists rather than a referral route.

The comparison worth making

Set this beside Mechernich, where six drones crossed a Bundeswehr depot holding Europe's only Patriot repair facility and one circled above the responding police officers. Two hemispheres, two months apart, the same sequence: repeated overflight of a uniquely valuable site, no interception, no identification, and a criminal investigation instead of a defence.

What should carry
  • Establish whether your site can do anything at all, and say so plainly. Most installations cannot detect, identify or engage a small drone, and the honest answer is a planning input rather than an admission. Assuming a capability that does not exist is the worse position.
  • Know who owns the response before the night it is needed. Here it was a state police unit. Whether that is right depends on the site, but it should be a decision, with agreed thresholds and a rehearsed route, rather than the default that emerges under pressure.
  • Treat the legal authority as part of the capability. Australia had to amend its regulations before personnel could seize or destroy a drone over a base. Equipment without authority to use it is not a counter-drone capability.
  • Manage what can be seen through a window. Closing the blinds was the measure that was available, and it worked in its own terms. Sightlines into working areas from outside the perimeter, and from above it, are worth mapping in advance.
  • Account for co-located civil operations. Newcastle Airport shares the field, which constrains any response and complicates identifying which aircraft is legitimate. Sites with shared or adjacent civil aviation should work the problem jointly rather than separately.
  • Log every incursion, including the ones that produce nothing. Two episodes a month apart only form a pattern if both are recorded. The value of the record is in the aggregate, and it is only available later if it is captured now.
Sources

Compiled from open-source reporting for professional security discussion. The incursions are unattributed. No operator has been identified, nobody has been arrested or charged, and there is no public evidence linking the activity to any foreign state. The findings of the completed police investigation have not been disclosed. The instruction to close window blinds, and the detail that no counter-drone weapon was used, are as reported in the Australian press and have not been confirmed in those terms by the Department of Defence. The suggested purposes of the incursions are an academic specialist's assessment of possibilities, not a finding. Details may be revised. This is a protective-security lessons-learned assessment, not an operational account.