Inside wave of hoax bomb threats targeting European flights

The threats produced real aviation emergencies even though every reported search found no explosives. Authorities had to treat each message as potentially dangerous because an aircraft in flight has limited options and many people could be affected. The incidents also tested coordination across European countries.

Some aircraft changed course, made emergency landings or received military escorts. At Schiphol Airport, Dutch military police detained a man after a threat against a Prague-bound flight. The aircraft later continued to Prague, and the man was released the next day. Authorities also searched aircraft and checked airport security arrangements.

The overall effect on European aviation remained limited, according to Europe's air traffic authority. Still, the unusual concentration of threats raised concerns about copycats, organized activity or possible hybrid warfare. Officials have not identified a responsible government or organization, and European security experts will meet in Brussels next week.

The scale was large enough to concern European security officials, but the article gives no exact flight total beyond saying “dozens.” The threats affected flights across Europe and required responses from airlines, airports and national authorities. They also coincided with other suspected disruptions, including attacks on supermarket refrigeration systems and unauthorized drone incursions.

Separately, three broadcasters received security threats on Friday: Ireland’s RTE, Britain’s Sky and Bulgaria’s NOVA TV. In aviation, some aircraft changed course, made emergency landings or received military escorts. Airlines and airport authorities conducted searches and security checks. These actions affected operations even when no device was found.

Europe’s air traffic authority assessed the overall effect on aviation as limited. That means the incidents caused disruption and extra work, but did not broadly halt European air travel. Their importance lies partly in the pattern: many threats appeared within a short period, while their connection and purpose remained unknown.

A bomb hoax is a deliberately false message or warning about an explosive device. The article describes threats that ultimately produced no discovered explosives, but that result was unknown when authorities first received them. The central safety rule is to verify the danger before allowing normal operations to continue.

That is why airports may search aircraft, inspect suspicious areas, change flight paths or arrange emergency landings. At Schiphol, Dutch military police detained a man over a threat against a flight to Prague. The aircraft later continued, and the man was released the following day. The response bought investigators time to check the claim.

Investigating every credible warning protects lives and preserves confidence in aviation. It also creates costs and delays when the message is false. In this wave, no injuries were reported and no explosives were found, but authorities still examined the incidents because the threats arrived in unusual numbers and might have involved copycats or coordinated actors.

A bomb threat activates layered emergency procedures rather than one single response. Flight crews and air traffic controllers may alter the aircraft’s route or arrange an emergency landing. Airport teams can isolate and search the aircraft, while security agencies investigate the message and protect passengers. National authorities coordinate decisions across borders.

The article reports that some flights changed course, made emergency landings or received military escorts. Airlines and airports conducted security checks, and NATO fighter jets can escort aircraft when necessary. At Amsterdam’s Schiphol Airport, Dutch military police detained a man connected to a threat against a Prague flight while authorities dealt with the alert.

These procedures are designed to manage danger without assuming every threat is genuine or dismissing it too quickly. The aircraft later continued to Prague, showing that normal operations can resume after checks. Matthew Borie said European agencies have coordinated mechanisms for aviation threats, but repeated incidents can still test their speed and cooperation.

A false threat still consumes resources because authorities must establish that it is false. Flights may leave their planned routes, land unexpectedly or pause before departure. Aircraft and airport areas need inspection, and security agencies must preserve information for investigations. These steps protect passengers but interrupt carefully timed operations.

The article describes aircraft being diverted, making emergency landings or receiving military escorts. Airlines and airport authorities also carried out security checks. At Schiphol, a flight bound for Prague was delayed while a threat was handled, although the aircraft eventually continued later that evening. No explosives were found, but the response was still necessary.

The immediate effects include delays, operational pressure and additional work for crews, airports and investigators. Jacob Funk Kirkegaard warned that continuing incidents could increase costs and create wider economic consequences. False alerts can therefore undermine confidence in air travel even when Europe’s air traffic authority says the overall impact remains limited.

Hybrid warfare means covert or indirect operations intended to weaken or destabilize a country without conventional military confrontation. The article connects the concept with uncertainty around aviation threats and other suspected disruptions. The goal may be less about physical destruction than about testing institutions and reducing public confidence.

For example, repeated false bomb warnings can force aircraft searches, diversions and emergency responses. Cyberattacks, in general, can similarly disrupt communications or essential services without a conventional attack. The article also mentions attacks on supermarket refrigeration systems and unauthorized drone incursions. Together, such incidents can make everyday systems appear less reliable.

European authorities have warned that Russia could be expanding hybrid activities, but they have not attributed these aviation threats to Moscow. Matthew Borie also cautioned that Iranian hybrid warfare is active in some European areas. No government or organization has been identified as responsible. The threats may therefore continue to test coordination, resilience and public trust.

Investigators determine whether threats are connected by comparing their wording, timing, targets, delivery methods and other technical evidence. They may examine email records, digital infrastructure, witness accounts and the actions of suspects. Similar language can suggest a connection, but it does not prove that the same person or group sent both messages.

The article gives two examples. An email sent to Rome airport authorities claimed to come from an anti-feminist group targeting a “feminist regime.” Another European airport received similar language, but investigators had not established whether the messages came from the same sender. Dutch military police also detained a man over a Schiphol threat, though his connection to the wider wave remained unclear.

Attribution requires evidence strong enough to distinguish an individual, copycats, an organized group or a state-backed operation. So far, no government or organization has been identified, and authorities have found no evidence connecting the threats to any state actor. Investigators therefore remain cautious.