JupiteX Get the app
Defence & Security5 Nov 2026 · about 6 min

Wave of bomb threats cause emergency landings for several flights across Europe

The brief

At least eleven passenger aircraft faced disruption on Thursday after suspected bomb threats. The incidents included diversions, military escorts, emergency landings, and preparations for pyrotechnic inspections. The threats mattered because aviation authorities must treat possible explosives as serious until aircraft and airports are checked. An Aer Lingus Airbus A320 flying from Dublin to Rome diverted to Evreux in France after declaring an emergency. Three aircraft landed in Bulgaria, while LOT diverted from Warsaw to Brussels. A Finnair flight was escorted to Rome, and another Finnair-operated flight landed normally in Vienna. Four aircraft heading to Prague received threats and awaited police checks. Authorities judged the Prague threats to have low credibility, yet activated security measures. The article reports no devices were found in these incidents. The immediate outcome was disruption rather than physical harm, but the repeated threats affected several European routes and raised concern about possible wider sabotage campaigns.

01

What happened to the European passenger flights mentioned in the report?

At least eleven passenger aircraft faced disruption on Thursday after suspected bomb threats. The incidents included diversions, military escorts, emergency landings, and preparations for pyrotechnic inspections. The threats mattered because aviation authorities must treat possible explosives as serious until aircraft and airports are checked.

An Aer Lingus Airbus A320 flying from Dublin to Rome diverted to Evreux in France after declaring an emergency. Three aircraft landed in Bulgaria, while LOT diverted from Warsaw to Brussels. A Finnair flight was escorted to Rome, and another Finnair-operated flight landed normally in Vienna. Four aircraft heading to Prague received threats and awaited police checks.

Authorities judged the Prague threats to have low credibility, yet activated security measures. The article reports no devices were found in these incidents. The immediate outcome was disruption rather than physical harm, but the repeated threats affected several European routes and raised concern about possible wider sabotage campaigns.

02

What is a bomb threat, and how is its credibility assessed when no device has been found?

A bomb threat is a warning that an explosive device may be present on an aircraft or at an airport. It can trigger emergency procedures even when nobody has confirmed that a device exists. The purpose of a credibility assessment is to judge the apparent risk while protecting passengers and staff.

The article gives one clear example. Czech police said four aircraft heading to Prague had received threats and assessed their credibility as low. They still planned pyrotechnic inspections after landing. More generally, authorities can compare the message with known information, examine its specificity, and review operational or intelligence evidence. Those details are not provided in the article, so the exact process here is unknown.

A low credibility rating does not mean authorities ignore the warning. It means they can apply precautions while expecting little evidence of an explosive. The article reports that no devices were discovered during the earlier disruptions, but checks remained necessary.

03

How many aircraft were diverted or required special handling, and which European countries were involved?

The report describes at least eleven aircraft requiring unusual handling. One Aer Lingus plane diverted to France, and at least ten other aircraft were then diverted or prepared for security action. The number matters because the incidents affected a network of routes rather than one isolated flight.

Three aircraft landed at Bulgarian airports: two reached Sofia from Copenhagen and Madrid, and one reached Plovdiv from London. A LOT flight from Warsaw landed in Brussels. One Finnair aircraft was escorted to Rome, another Finnair-operated flight landed normally in Vienna, and four aircraft heading to Prague awaited police procedures. These destinations involved France, Bulgaria, Belgium, Italy, Austria, and the Czech Republic.

The article does not present one single official tally for every category. It says at least eleven planes were forced to land, while the Prague aircraft were still preparing to land. Therefore, the safest summary is at least eleven affected aircraft, with some diverted and others specially handled.

04

Why must an aircraft land, be escorted, or undergo a pyrotechnic inspection even when authorities judge a threat to be unlikely?

Aircraft must be handled cautiously because a missed explosive threat could cause catastrophic harm. A low credibility assessment describes the available judgment, not absolute proof that no device exists. Landing or escorting the aircraft creates a controlled setting for checks and separates it from normal airport activity.

The Prague case shows this balance clearly. Czech police said the threats appeared unlikely to be genuine, but they activated necessary security measures and planned pyrotechnic inspections after landing. A Finnair plane from Helsinki was also escorted to Rome by the Italian air force. These actions allowed authorities to investigate without assuming the warning was harmless.

Such precautions can inconvenience passengers and disrupt airport operations, but the police said the impact would be minimal. The article reports that no devices were found in the earlier incidents. Still, inspections remain important because only a completed security response can replace suspicion with evidence.

05

What happens during an emergency diversion, and how do pilots, air-traffic controllers, airports, police, and airlines coordinate it?

During an emergency diversion, pilots declare the problem, air-traffic controllers help clear a route, and the aircraft lands at an airport prepared to receive it. Airport teams then coordinate emergency services, security checks, passenger handling, and communication with the airline. The article does not describe every individual step, but it shows this shared response.

The Aer Lingus Airbus A320 flying from Dublin to Rome declared an in-flight emergency and turned near Paris. It was diverted to Evreux airbase, about 100 kilometres west of Paris, where it landed safely. The French prime minister's office announced the diversion, while Aer Lingus confirmed the safe landing. Flight-tracking data showed the aircraft circling near Evreux.

Other responses used different levels of intervention. Bulgarian airports accepted three diverted aircraft. The Italian air force escorted a Finnair plane to Rome, while police prepared for Prague arrivals. Airlines provide flight details and passenger support, while authorities manage security and airport coordination.

06

Why can a single bomb threat temporarily close an airport or disrupt many other flights?

Airports are tightly connected systems, so one suspected bomb threat can affect much more than one aircraft. Officials may need to protect runways, terminals, aircraft stands, and emergency routes. Until they understand the risk, arrivals and departures may be paused to prevent additional passengers and planes entering a potentially unsafe area.

The report says Rome Fiumicino Airport was reportedly temporarily closed after a bomb threat. An Aer Lingus flight originally bound for Rome diverted to Evreux. A Finnair flight from Helsinki was later escorted to Rome, while another Finnair flight landed normally in Vienna. These changes show how one suspected danger can redirect aircraft and alter airport schedules.

The wider effect comes from network dependence. When an airport closes, aircraft may need new destinations, and crews, gates, runways, and passengers must be reorganised. The article reports that at least ten additional planes were diverted or specially handled, although authorities said security measures at Brussels were unnecessary.

07

What are hybrid attacks, and why can hoax threats be used as a low-cost, difficult-to-attribute form of disruption?

Hybrid attacks are coordinated or related disruptive actions that can combine cyber activity, sabotage, misinformation, or false alerts. They matter because they can pressure societies and critical services while making responsibility difficult to prove. In this report, officials have blamed Russia and Iran for alleged hybrid attacks, but both countries deny running such campaigns.

The article links hoax bomb threats to a possible pattern of low-cost disruption. A false warning can force aircraft to divert, airports to pause operations, and police to deploy resources. The reported threats caused these effects even though no devices were found. Unidentified hackers also shut down supermarket fridges in several European countries, which experts viewed as a potentially similar pattern.

The article does not establish who organized the threats or whether they formed one campaign. It says some experts considered that possibility. The immediate lesson is that disruption alone can be effective, while deniability makes attribution difficult and may complicate future responses.

This brief was written by AI from the original reporting and checked by other models. Names, figures and quotes come from the source; read it for full context.

Read more in the JupiteX app

Pulse is free. New stories every 4 hours, each one broken into the questions that explain it.

Or read more news on the web