On 3 November 2026, at least seven flights throughout Europe and a Panama-flagged cruise ship in Greece received bomb threats, triggering airport closures, plane diversions, and military escorts. Inspections confirmed no explosives were found on any of the targeted aircraft or the vessel.
European Flights and Airports Affected
Flights threatened included two bound for Warsaw, two heading to Sofia, two destined for Rome, and one landing in Murcia, Spain. LOT Airlines had a flight from London diverted to Modlin Airport instead of Warsaw Chopin Airport due to a bomb threat, prompting a temporary closure and search before reopening. Another Warsaw-bound SAS flight from Copenhagen arrived
safely at Chopin Airport, which briefly closed but remained operational after no device was located.
Two Sofia-bound flights faced threats: Wizz Air’s Bergamo to Sofia service carried 176 passengers while Ryanair’s Dublin to Sofia flight had 186 passengers onboard; both landed safely after inspections. The day before, a Wizz Air flight from London to Sofia diverted to Budapest Airport following a bomb threat. Two Ryanair flights—from Lisbon and Dublin—were searched at Rome’s Fiumicino Airport, with the Dublin flight escorted by the Italian Air Force to ensure safe landing. An additional Ryanair flight traveling from Manchester to Murcia was targeted; airport
areas were cordoned off but normal activity resumed after no explosives were found.
Official Responses and Security Measures
Bulgaria’s transport ministry confirmed the threats against the Milan/Bergamo and Dublin to Sofia flights and stated no explosives were detected. Chopin Airport authorities reported no devices found and continued normal operations. Hungary’s Defence Minister Romulusz Ruszin-Szendi confirmed the diversion of the London to Sofia Wizz Air flight to Budapest on 2 November due to a threat. Rome’s airport operator ADR stated the alerts linked to the Ryanair flights were resolved without lasting disruption.
The Italian Air Force escorted the Ryanair flight from Dublin to Fiumicino Airport following
the bomb threat. Modlin Airport was closed briefly for a plane search after the LOT flight diversion. Murcia Airport in Spain cordoned off specific areas around the Ryanair flight landing but reopened after confirming the threat was a hoax.
Context and Expert Analysis of Bomb Threat Pattern
No group claimed responsibility for the bomb threats, and authorities have not attributed blame. European officials have previously accused Russia and Iran of hybrid attacks targeting critical infrastructure. Moscow and Tehran deny these allegations. Analysts note the threats follow a pattern of low-cost, deniable disruptions similar to recent cyberattacks on European infrastructure.
Rhys Jones, Analysis Output Manager at aviation risk advisory
firm Osprey Flight Solutions, stated, “The lack of clear target state, airline, or route indicates that general disruption to aviation operations is the aim.” Eric Schouten, head of the aviation security group Dyami, said, “From railways to the food infrastructure that you see happening with the fridges being hacked and all kinds of other operations, it does fit the narrative of Russian state actors who want to disturb Europe.”
Bomb Threat on Cruise Ship in Greece
A Panama-flagged cruise ship, Crown Iris, moored off Syros Island in Greece, was also threatened with a bomb on 3 November. The Greek Coast Guard employed explosives detection dogs and divers
to inspect the ship’s hull. No explosive devices were found, and further inspections were anticipated before the ship’s voyage could continue.
The series of bomb threats on flights and the vessel has caused heightened security responses but so far produced no confirmed device discoveries or claims of responsibility.
