JupiteX Get the app
Defence & Security4 Nov 2026 · about 6 min

Fake bomb threats on flights and cruise ship cause travel disruption in Europe

The brief

At least seven flights and one cruise ship received bomb threats on Tuesday. The flights involved routes to Warsaw in Poland, Sofia in Bulgaria, Rome in Italy, and Murcia in Spain. The cruise ship was searched at Syros, a Greek island. A further flight to Sofia had been threatened the previous day. The affected flights included two bound for Warsaw, two for Sofia, two for Rome, and one for Murcia. Authorities also searched the Panama-flagged Crown Iris after an unknown person said an explosive device was attached to its hull. No device was found on any affected aircraft or during the ship’s initial checks. The locations show that the disruption crossed several European transport systems. Airports briefly closed areas or diverted flights, while the cruise ship remained under inspection before continuing. Officials did not identify a responsible person or country, and the article reports no claim of responsibility.

01

How many flights and other vessels were targeted by bomb threats, and which European locations were affected?

At least seven flights and one cruise ship received bomb threats on Tuesday. The flights involved routes to Warsaw in Poland, Sofia in Bulgaria, Rome in Italy, and Murcia in Spain. The cruise ship was searched at Syros, a Greek island. A further flight to Sofia had been threatened the previous day.

The affected flights included two bound for Warsaw, two for Sofia, two for Rome, and one for Murcia. Authorities also searched the Panama-flagged Crown Iris after an unknown person said an explosive device was attached to its hull. No device was found on any affected aircraft or during the ship’s initial checks.

The locations show that the disruption crossed several European transport systems. Airports briefly closed areas or diverted flights, while the cruise ship remained under inspection before continuing. Officials did not identify a responsible person or country, and the article reports no claim of responsibility.

02

What is a bomb threat, and how is it different from finding an actual explosive device?

A bomb threat is information claiming that an explosive device may be on an aircraft, ship, or at a transport facility. It can arrive by phone, message, or another channel. The threat itself is not proof that a bomb exists. Authorities must treat it seriously until trained personnel inspect the relevant place.

In this case, warnings affected flights and the Crown Iris cruise ship. Officials searched aircraft at Warsaw, Sofia, Rome, and Murcia. An explosives detection dog and a diver searched the ship at Syros. Inspections found no devices on the aircraft, and initial checks found none on the ship.

That difference matters because a threat can still trigger major safety procedures without an explosion occurring. Modlin airport in Warsaw was briefly closed, and a flight was diverted there for inspection. The Murcia report was called a hoax, but only after authorities searched the plane and found no explosives.

03

What immediate consequences did the threats have for airports, airlines, passengers, and the cruise ship?

The threats caused immediate operational and security disruption. Airports had to inspect aircraft, restrict areas, and manage diverted or escorted flights. Passengers faced delays, searches, and uncertainty. The article does not report injuries or an explosion, but it shows that unverified warnings can interrupt normal travel quickly.

A LOT flight from London was diverted from Warsaw Chopin airport to nearby Modlin airport. Modlin was briefly closed, then reopened after the plane was searched. Two flights to Sofia landed safely and were inspected. At Murcia, parts of the airport were cordoned off after a Ryanair threat. Two Ryanair flights were also searched at Rome’s Fiumicino airport.

The Dublin-to-Rome flight received an Italian Air Force escort. The Crown Iris was searched at Syros, and further coastguard inspections were expected before it resumed its voyage. Despite these measures, Chopin and Fiumicino continued operating, and officials found no explosives.

04

Why might authorities divert a flight, close part of an airport, escort a plane with military aircraft, or search a cruise ship after an unverified threat?

Transport authorities use precautionary measures when a credible-sounding threat identifies a plane, ship, or facility. They cannot assume it is a hoax before checking. A diversion can move an aircraft to a suitable airport. A temporary closure can keep people away from a possible danger. A military escort can provide protection and coordination during a sensitive landing.

That pattern appeared across Europe. A LOT flight was diverted from Warsaw Chopin to Modlin, which was briefly closed while the aircraft was searched. The Dublin-to-Rome Ryanair flight was escorted by the Italian Air Force. In Greece, an explosives detection dog and a diver searched the Crown Iris after a warning about its hull.

These actions reduce immediate risk while allowing specialists to inspect safely. They also explain why normal operations were disrupted even though no devices were found. In the reported cases, airports reopened or continued operating after searches cleared the alerts. The ship faced additional checks before sailing onward.

05

What is known about who made the threats, and why does the absence of a claim of responsibility matter?

The article does not identify who made the threats. There was no claim of responsibility, and officials did not attribute blame. An unknown person specifically reported that an explosive device had been attached to the Crown Iris. The same article says Russia and Iran deny involvement in broader campaigns that European officials have described as hybrid attacks.

The lack of a clear target, airline, or route was notable to Rhys Jones of Osprey Flight Solutions. He said seven confirmed bomb threats affecting flights in one day were exceptional. He assessed that general disruption to aviation operations appeared to be the aim, rather than an obvious attack on one named target.

Without a claim, investigators and officials have less information about motive, coordination, and credibility. It also limits public attribution. The threats may fit a wider pattern of low-cost, deniable disruption, some experts said, but the article does not establish who was responsible. No country pointed fingers over these incidents.

06

What are hybrid attacks, and how can low-cost, deniable acts disrupt critical infrastructure without physically destroying it?

Hybrid attacks are campaigns that combine different forms of pressure, such as cyber incidents, hoaxes, sabotage, or other disruptive actions. They can target systems people rely on without physically destroying major infrastructure. Their power comes from interruption, fear, cost, and the effort needed to check whether danger is real.

The article places the bomb threats beside a separate incident in which unidentified hackers shut down fridges in supermarkets across several European countries. Experts said hoax bomb threats could be part of a similar pattern. A warning can force aviation authorities to divert planes, search aircraft, close areas, and deploy security teams, even if no bomb exists.

European officials have blamed Russia and Iran for what they describe as hybrid attacks and sabotage, but both countries deny such campaigns. Eric Schouten said disruption from railways to food infrastructure fits a narrative of Russian state actors disturbing Europe. The article does not confirm that these threats came from them.

07

Why can a threat to a single aircraft or ship create wider disruption across interconnected transport networks?

Air transport is interconnected: aircraft move between airports, and each airport coordinates runways, gates, screening, emergency teams, and onward flights. A warning affecting one aircraft can therefore require several organizations to act at once. The same principle applies to a cruise ship, whose route depends on port and coastguard clearance.

The LOT flight diverted from Warsaw Chopin to Modlin, which then closed briefly during the search. Rome’s Fiumicino airport searched two flights, while the Italian Air Force escorted one. At Murcia, parts of the airport were cordoned off. These actions involved aircraft operators, airports, military personnel, and security specialists.

The article says some airports continued operating and that no explosives were found. Even so, the measures consumed time and resources and created uncertainty for passengers and airlines. Rhys Jones called seven confirmed threats in one day exceptional. Repeated warnings could therefore spread disruption beyond the originally targeted plane or ship.

This brief was written by AI from the original reporting and checked by other models. Names, figures and quotes come from the source; read it for full context.

Read more in the JupiteX app

Pulse is free. New stories every 4 hours, each one broken into the questions that explain it.

Or read more news on the web