Bomb Threats Hit Dozens of European Airports

Dozens of European flights and airport operations were disrupted by emailed bomb threats. The warnings affected airlines including Aer Lingus, Wizz Air, LOT, Finnair, EasyJet, Iberia, and KLM. The incidents mattered because authorities had to treat unverified messages as possible security risks while keeping passengers safe.

Responses varied by location. French fighter jets escorted an Aer Lingus flight from Dublin to Rome to an air base after the pilot reportedly refused an air force request. Bulgaria’s air force escorted three flights to the ground. In Poland, a LOT flight to Paris was stopped before takeoff, and passengers were moved to another flight.

Spain reported three threats within 20 minutes against Air Europa and Iberia flights. Romania reported a threat against a KLM flight to Tel Aviv. No group had claimed responsibility by Friday morning, and Reuters could not verify who sent the emails. The disruptions also fit wider European warnings about hybrid attacks.

Reuters reported that at least 30 flights were affected on Thursday. This figure covers flights across Europe, involving carriers such as Aer Lingus, Wizz Air, LOT, Finnair, EasyJet, Iberia, and KLM. The scale made the warnings more than isolated aviation incidents and created disruption across several national systems.

The threats followed a separate wave on Tuesday that affected at least seven flights and a cruise ship. The article does not give a combined total for all transport affected across both days. It also reports that emails were sent to multiple airlines, airport operators, and airport service providers at Rome’s Fiumicino and Milan’s Malpensa airports.

Specific responses included Bulgaria escorting three flights to the ground and Poland stopping one flight before takeoff. Spain received three emailed threats within 20 minutes. Romania reported a threat against one KLM flight to Tel Aviv. These figures show the breadth of the warnings, but not how many were genuine devices or explosives.

A bomb hoax is a warning about an explosive that proves false, or has no verified evidence behind it. A confirmed bomb threat is different because investigators have information indicating a credible device or danger. The distinction often cannot be made immediately, so authorities must respond before the facts are clear.

The European warnings caused real operational measures even though the article describes them as hoaxes. France used fighter jets to escort an Aer Lingus flight. Bulgaria escorted three flights to the ground, while Poland stopped a LOT flight before takeoff and transferred its passengers. These actions show how an unverified message can produce serious consequences.

The article does not report any discovered bombs or confirmed explosives. Reuters could not verify the email’s true sender, and no group had claimed responsibility by Friday morning. The message used the name “fighters of the Male State,” but the movement’s founder denied involvement. The warnings therefore remained unverified threats rather than confirmed attacks.

When a flight receives a bomb threat, aviation authorities treat it as a possible emergency. The aircraft may be stopped, separated from other operations, inspected, or directed to a secure location. Police and air forces may coordinate the response, while airlines manage passengers and replacement travel. The exact procedure depends on the circumstances.

The article gives several examples. French fighter jets escorted an Aer Lingus flight from Dublin to Rome to an air base after the pilot reportedly refused an air force request. Bulgaria’s air force escorted three flights to the ground. Poland stopped a LOT flight to Paris before takeoff and transferred its passengers to another flight.

Spain’s police investigated three emailed threats sent within 20 minutes against Air Europa and Iberia flights. Romania reported a threat against a KLM flight to Tel Aviv. These responses show why bomb warnings disrupt entire networks. Even when authorities later treat them as hoaxes, they must first protect passengers and check the aircraft or operation.

Attribution is difficult because an email can hide its sender and imitate another movement’s name. Investigators must establish who created it, who sent it, and whether that person acted alone or for a larger organization. A message can also be intended to mislead investigators, making its signature weak evidence.

The reported emails were signed by “fighters of the Male State.” That name resembles an inactive anti-feminist group in Russia, but its founder, Vladislav Pozdnyakov, denied involvement. Reuters could not verify the email’s real sender. This example shows how a recognizable label can point investigators toward the wrong actor.

Security experts said the hoaxes could have come from individuals or state actors, but it was too early to determine. Eric Schouten of aviation security group Dyami said proving a country’s role in sabotage is difficult, even when an incident fits a known modus operandi. No group had claimed responsibility by Friday morning, leaving the origin unresolved.

Hybrid attacks use several tools together to pressure or destabilize an opponent. They may involve physical sabotage, destructive cyberattacks, disinformation, covert recruitment, or deniable attacks. The common feature is that the pressure can remain below the level of an openly declared conventional attack, while still damaging trust, services, or security.

The article connects the flight hoaxes to European warnings about escalating hybrid attacks. Denmark’s Defense Intelligence Service listed sabotage, cyberattacks on critical infrastructure, disinformation, covert recruitment, and deniable attacks against companies or transport routes supporting Ukraine. The flight warnings used emails, but their effects spread into aviation operations and military responses.

The article does not establish that Russia caused the hoaxes. Security experts said the perpetrators could be individuals or state actors. Still, the incidents fit the broader concern because they disrupted transport and created uncertainty. European officials warn that such activity may intensify, while authorities must respond without knowing whether the threat is criminal, political, or state-directed.

Critical infrastructure matters because many people and services depend on it operating continuously. Airports connect countries, airlines, passengers, cargo, and supporting businesses. A warning alone can interrupt those connections, consume emergency resources, delay travel, and unsettle the public. Physical destruction is not required to create disruption.

The article shows this mechanism clearly. At least 30 flights were affected on Thursday, and airports, airlines, and service providers received emails. France used fighter jets, Bulgaria escorted three flights to the ground, and Poland stopped a flight before takeoff. The threats therefore produced visible consequences even though no confirmed bomb is reported.

European officials place the incidents within wider concerns about hybrid attacks. Denmark warned of sabotage and cyberattacks against critical infrastructure, while Poland cited arsons, assassinations, and an attempted train explosion among Russian hybrid threats. The article gives no confirmed perpetrator or outcome, but continued warnings suggest transport systems will remain a security concern.