Checked as of 8 November 2026.
A wave of bomb threats has disrupted passenger flights and news organisations across Europe, prompting diversions, evacuations, fighter escorts and NATO air patrols. No explosives were found on the threatened aircraft, and all landed safely. European officials suspect that at least some threats may form part of a hybrid campaign intended to create fear, cost money and weaken public trust, but Reuters could not identify the sender or link every incident to one source. Russia has been accused by some officials because of a wider pattern of alleged sabotage and cyber operations; Moscow denies involvement. This topic matters because a hoax can produce real strategic effects without a bomb: pilots must respond, airports close, broadcasters evacuate and governments risk escalation if they attribute responsibility too quickly.
Key takeaways
- Dozens of flights received threats; no explosives were found.
- Some aircraft diverted or received fighter escorts.
- Newsrooms in Ireland and Bulgaria were also threatened.
- European officials suspect hybrid disruption, but attribution is unproven.
- Copycats and deliberate false trails remain possible.
What happened?
Threats were sent to airlines, airports and broadcasters in several countries. Ireland’s RTÉ evacuated offices and suspended programming, while Bulgarian and British outlets also reported threats. Flights were diverted or escorted through European airspace. NATO ordered some patrol activity.
The sender used names and ideological references that may be genuine, copied or deliberately misleading. Reuters could not verify identity or establish that every message came from the same actor.
Why authorities treat every threat seriously
Aviation security cannot assume a threat is false. Airlines and controllers must assess fuel, diversion airports, passenger safety and airspace. Fighter escorts can identify and accompany aircraft but also add cost and risk.
Earth Site’s guide to national airspace and the Chicago Convention explains why each state controls security responses in its skies.
What is hybrid warfare?
Hybrid activity combines tools below the threshold of conventional war: cyberattacks, sabotage, disinformation, economic pressure and covert action. The objective may be disruption or mistrust rather than physical destruction.
Earth Site’s articles on NATO expansion and Russia and how Ukraine changed modern warfare explain why European governments use this term. A useful label is not proof of authorship.
The problem of attribution
Email addresses, names and online claims can be spoofed. Attackers may route messages through other countries or imitate political groups. Copycats can join a genuine campaign, making one wave contain several unrelated actors.
Earth Site’s report on false emergency alerts in Ukraine and Russia demonstrates the same principle: unauthorised disruption can be confirmed before the perpetrator is known.
Why hoaxes can be strategically effective
Each threat consumes police time, fuel, airport capacity and newsroom resources. Repetition may desensitise staff and the public, increasing the danger that a real warning is ignored. Media coverage can amplify fear even when safety systems work.
The cost imbalance is attractive to hostile actors: sending messages is cheap, while verifying them is expensive. Yet governments must avoid overreaction that restricts rights or blames another state without evidence.
How Europe can respond
Airlines, broadcasters and governments can share indicators, preserve evidence, standardise threat assessment and communicate clearly. Public explanations should state what is confirmed, what is suspected and what remains unknown.
Earth Site’s overview of Europe’s geopolitical challenges in 2026 places resilience alongside conventional defence. The goal is to maintain safe services without allowing hoaxes to dictate public life.
Conclusion
The European threats caused real disruption despite the absence of explosives. Hybrid-war suspicions are understandable, but attribution remains unresolved and may differ between incidents. Effective resilience means taking threats seriously, investigating patiently and communicating uncertainty without spreading panic.
Frequently asked questions
Were bombs found?
No explosive devices were found on the threatened aircraft in the reported wave.
Did flights divert?
Yes. Some diverted, and several received military escorts.
Was Russia proven responsible?
No. Officials raised suspicions, and Russia denied involvement; attribution remained unproven.
Why call the threats hybrid activity?
They may create fear, cost and mistrust below the threshold of armed attack.
Could copycats be involved?
Yes. Investigators said copycats, personal motives and false trails could not be ruled out.
