Commissioner Andrius Kubilius, answering a parliamentary question from seven PPE MEPs, defended the security of EU-owned space infrastructure against Russian 'Luch' vehicles conducting close-proximity manoeuvres near European geostationary satellites. Kubilius stated that thanks to the security design of EU space systems, no effect has been identified on EU programme payloads, even when targeted. However, he acknowledged that European commercial sector satellites may be more exposed to interference or malicious activities, pointing to the Commission's proposed EU Space Act of June 2025 as a measure to enhance resilience for both commercial and governmental satellites.
The question, submitted on 6 February 2026 by MEPs Hélder Sousa Silva, Lídia Pereira, Paulo Cunha, Sebastião Bugalho, Wouter Beke, Pekka Toveri, and Alice Teodorescu Måwe, raised urgent concerns about the exposure of satellites serving Europe to interception of uplinks and capture/replay of command links, and asked about immediate mitigation measures in 2026.
Kubilius's answer contained concrete references to existing legal frameworks but no new numerical targets or deadlines. He outlined that General Security Requirements (GSR) for all EU space systems are determined by the Commission, are EU classified, and are based on a security risk assessment that considers the geopolitical context and capabilities of state actors. The Security Accreditation Board (SAB), an independent body of Member State representatives, provides security accreditation by auditing all components and procedures before deployment and operations. Supply-chain risks are limited through eligibility and participation conditions in the Space Programme Regulation and Secure Connectivity Regulation.
The answer signals a defensive posture, emphasising that existing security measures are adequate for EU-owned systems while acknowledging vulnerabilities in the commercial sector. The proposed EU Space Act is presented as the main vehicle for future resilience improvements, but no timeline for its adoption or specific new requirements for GOVSATCOM/IRIS² were announced.
The EU Space Act proposal, tabled in June 2025, is now under negotiation between the European Parliament and the Council. The Commission is likely to rely on this legislative process to introduce mandatory security requirements for commercial satellites. No immediate operational measures beyond existing frameworks were announced for 2026.