At least seven European flights and a cruise ship were subjected to bomb threats on November 3, 2026, triggering airport disruptions and security inspections across multiple countries. No explosive devices were found on any of the flights or the cruise vessel after comprehensive searches.
Flight Routes and Passenger Impact
The bomb threats targeted flights landing at Warsaw Chopin Airport, Sofia Airport, Rome Fiumicino Airport, and Murcia International Airport. A LOT Polish Airlines flight from London to Warsaw was diverted to Warsaw-Modlin Airport, which temporarily closed before resuming operations following security checks. An SAS flight from Copenhagen to Warsaw landed safely at Chopin Airport and was
inspected without incident.
Two flights to Sofia were affected: a Wizz Air service from Milan Bergamo carrying 176 passengers and a Ryanair flight from Dublin with 186 passengers on board. Both arrived safely and were searched with no explosives found, according to the Bulgarian Transport Ministry. Additionally, on November 2, 2026, a Wizz Air flight from London to Sofia was diverted to Budapest, escorted by a Hungarian Gripen fighter jet, as confirmed by Hungarian Defence Minister Romulusz Ruszin-Szendi.
In Spain, a Ryanair flight from Manchester to Murcia, carrying 121 people (114 passengers and 7 crew), was subject to a bomb
threat that led to parts of Murcia International Airport being cordoned off. Authorities cleared the plane after the search found no explosives, allowing the airport to resume normal operations.
Rome Fiumicino Airport handled security checks on two Ryanair flights arriving on the morning of November 3: one from Lisbon landing at 0940 CET and another from Dublin at 1030 CET. Both flights were searched thoroughly; the Dublin flight was escorted by the Italian Air Force during its approach. The airport operator ADR stated the security protocols were completed without affecting other flights or the airport’s overall operations.
On October 18,
2026, an Austrian Airlines flight with 51 passengers and 6 crew from Tel Aviv to Vienna was diverted instead to Sofia following a bomb threat. No explosives were detected, and the flight resumed afterward.
Cruise Ship Security Search
The Panama-flagged Crown Iris cruise ship near the Greek island of Syros underwent an explosives detection search by dog units and divers on November 3. Initial and subsequent inspections found no bomb attached to the vessel’s hull. The Greek Coast Guard confirmed that further checks were planned before allowing the ship to continue its journey.
Official Responses and Security Actions
LOT Polish Airlines confirmed the diversion of their flight to Warsaw-Modlin
Airport and reported air operations resumed around midday following security measures. Chopin Airport reported it remained operational throughout the incident and stated definitively that no explosive devices were found. The Bulgarian Transport Ministry verified the bomb threats against flights arriving at Sofia but confirmed no devices were discovered post-inspection.
Spanish government delegate Francisco Lucas described the activation of security protocols for the Ryanair Manchester-Murcia flight and the subsequent clearance after no explosives were detected. Hungarian Defence Minister Romulusz Ruszin-Szendi provided official confirmation of the Wizz Air flight diversion and military escort.
The Italian Air Force played a role in escorting
the Ryanair flight from Dublin to Rome during its approach to Fiumicino Airport. The airport operator ADR emphasized that security checks were completed without a bomb threat to the airport or other simultaneous flights.
Context and Expert Analysis
These incidents form part of a pattern of hybrid attacks and sabotage campaigns that European officials attribute to state actors, primarily Russia and Iran, although both countries deny involvement. The lack of a specific target state, airline, or route suggests the primary intent is to disrupt aviation operations broadly. Rhys Jones, Analysis Output Manager at Osprey Flight Solutions, described seven confirmed bomb threats affecting flights in
one day as exceptional and interpreted the attacks as a general attempt to unsettle European air traffic.
Eric Schouten, head of the aviation security group Dyami, linked the bomb threats to a broader campaign of low-cost, deniable disruptions. He cited parallel attacks such as hackers shutting down supermarket fridges across Europe, suggesting these efforts align with a narrative involving Russian state actors intending to destabilize the region.
Traveler Disruptions and Security Measures
Passengers on the targeted flights experienced diversions to alternate airports, emergency landings, and mandatory security checks resulting in delays. Warsaw-Modlin Airport and Murcia International Airport were temporarily closed or partially cordoned off during
inspections. Some flights were escorted by military fighter aircraft as precautionary measures. These actions led to abrupt changes in travel plans without any reported security breaches.
No explosive devices were discovered on any flight or the cruise ship involved in the November 3 threats. Authorities have not reported any claims of responsibility for the incidents.
