What we know about bomb threats hitting European flights for third day

About 20 flights across Europe were targeted by bomb alerts on Thursday, November 5. The warnings formed a third straight day of hoaxes. Flights from Greece to Britain were involved, but the alerts especially affected low-cost carriers and routes linked to Bulgaria, the Czech Republic and Italy. Three flights were diverted, while others continued after checks.

Ryanair was prominent in the response. Bulgaria escorted three Ryanair flights heading to Sofia from Madrid, Copenhagen and London Stansted. A Ryanair flight from Stansted was diverted to Plovdiv. A Wizz Air flight from Milan to Warsaw was rerouted to Vienna. France escorted an Aer Lingus flight from Dublin to Rome and diverted it to a military base.

No explosives were found on the inspected planes. Many other targeted flights landed normally, including flights operated by LOT Polish Airlines, EasyJet, Sky Express and Aegean Airlines. The incident affected only a tiny share of European aviation, but it triggered costly security measures and delays.

A bomb threat hoax is a false warning that an explosive device has been placed on an aircraft. Such a warning can still cause major disruption because authorities must treat the possibility seriously until the plane and passengers are checked. In this episode, three flights were diverted, several received military escorts, and inspected aircraft contained no explosives.

The evidence pointed away from a real attack. Czech police said they considered the threats low in credibility, while Copenhagen police said there was no danger to passengers or anyone at the airport. Bulgaria’s interior ministry said three escorted Ryanair planes were inspected without explosives being found. Most other targeted flights also landed safely.

Authorities did not simply ignore the alerts. They activated security measures, including escorts, diversions and inspections. This cautious approach protected passengers while allowing most flights to continue. The article identifies the warnings as hoaxes, but it does not explain who created every message.

The disruption was broad in geography but small in proportion. Authorities and airlines reported that about 20 flights received hoax bomb alerts on Thursday. Eurocontrol counted roughly 25,072 flights scheduled across Europe that day. Dividing the targeted flights by the scheduled total gives approximately 0.08 percent, or about eight flights per 10,000.

Even this small fraction created visible disruption. Three flights were diverted, at least five received air force escorts, and other aircraft were inspected or handled under special security procedures. Routes involving Bulgaria, the Czech Republic and Italy were particularly affected. Several low-cost carriers, including Ryanair and Wizz Air, were involved.

The figures show why aviation systems must balance scale with caution. Most flights operated normally, and nearly all targeted aircraft landed safely. Yet a single warning can require action because officials cannot dismiss a possible bomb before checking the aircraft. The alerts therefore produced a disproportionate security response compared with the number of flights affected.

Military escorts and diversions were precautionary responses to reported bomb threats. Fighter jets could accompany aircraft while authorities managed the alert. Diversions moved some planes to airports or military facilities where security teams could inspect them. This reduced uncertainty before passengers and aircraft returned to normal operations.

Bulgaria escorted three Ryanair planes bound for Sofia from Madrid, Copenhagen and London Stansted. France accompanied an Aer Lingus flight from Dublin toward Rome and diverted it to the Evreux military base. A Ryanair flight was diverted to Plovdiv, and Wizz Air moved from Milan-Warsaw to Vienna. The inspected aircraft had no explosives.

Authorities still acted because a threat cannot be safely dismissed before checks are complete. Czech police called the threats low credibility but activated every necessary security measure. Copenhagen police likewise reported no danger, while threatened planes landed as scheduled. The response shows a layered system: caution first, then continued flight operations when checks find no danger.

The article identifies several recipients and channels, but not a confirmed sender. ADR, the company managing Rome’s airports, received a message naming two Rome-bound flights. Il Corriere della Sera published that message. Prague Airport received threats from anonymous email addresses. The text sent to ADR used broken Italian and included misogynistic language.

The message named AY1751 from Helsinki to Rome and EI402 from Dublin to Rome. Prague’s airport spokeswoman said its threats came from anonymous addresses. No one claimed responsibility for all the flights. The article therefore provides evidence about how some warnings were delivered, but not proof of one organization behind them.

European authorities also noted a wider rise in hybrid attacks, sometimes linked to Russia or Iran. However, EU transport commissioner Apostolos Tzitzikostas wrote that it was too early to decide whether the reported incidents were connected. Different messages, unknown senders and incomplete evidence prevented a firm conclusion.

Thursday’s alerts extended a three-day pattern of false bomb warnings across Europe. On Monday, a Wizz Air flight from London Luton to Sofia was diverted and made an emergency stop in Budapest. On Tuesday, 10 flights were targeted, all alerts proved to be hoaxes, one Warsaw airport closed, and Italian fighter jets were deployed.

Thursday brought about 20 targeted flights, including routes involving Greece, Britain, Bulgaria, the Czech Republic, Italy, Denmark, Spain and Austria. Ryanair, Wizz Air, Aer Lingus, LOT Polish Airlines, EasyJet, Sky Express and Aegean Airlines appeared among the affected operators. Three flights were diverted, while at least five received air force escorts.

The pattern created repeated disruption without confirmed explosives or reported danger to passengers. It also raised questions about whether the events were coordinated. The EU transport commissioner said it was too early to link them, while European authorities noted that hybrid attacks have increased and can sometimes be linked to Russia or Iran.

The basic trade-off is managed through targeted intervention. Authorities do not automatically stop every aircraft after a warning. Instead, they assess the alert, notify airports and airlines, and choose measures such as fighter escorts, diversions, inspections or continued monitoring. This protects passengers while preserving most scheduled traffic.

Thursday provided several examples. Bulgaria escorted three Ryanair flights and inspected them without finding explosives. France diverted an escorted Aer Lingus flight to the Evreux military base. Other threatened aircraft, including flights to Copenhagen, Prague, Brussels and Bucharest, landed at their planned destinations. Czech police said the threats looked unlikely but still activated all necessary security measures.

The approach kept the disruption limited: about 20 flights were targeted among 25,072 scheduled across Europe. Yet repeated alerts can still close airports, redirect aircraft and consume military and police resources. The article does not describe future reforms, but authorities’ uncertainty about links means similar threats may continue to require case-by-case decisions.