Bomb threats disrupt seven European flights and cruise ship as searches find no explosives

A series of bomb threats targeting passenger aircraft and a cruise ship caused widespread security disruption across Europe on Tuesday, 3 November 2026, prompting emergency searches, flight diversions and the temporary closure of an airport near Warsaw. At least seven flights were affected across Poland, Italy, Spain and Bulgaria, while an Israel-bound cruise ship underwent security checks in Greece. Authorities subsequently reported that no explosive devices had been discovered, although the origin of the threats and whether they formed part of a coordinated campaign remained unresolved.

The incidents affected flights operated by Ryanair, Wizz Air, Scandinavian Airlines and LOT Polish Airlines, including services travelling between major European airports. In Italy, military aircraft escorted a Ryanair flight from Dublin to Rome, while Polish authorities temporarily suspended operations at Warsaw Modlin Airport after a diverted aircraft received a threat. Emergency protocols were also activated in Spain and Bulgaria, demonstrating how a single security warning can affect multiple parts of the aviation system even when an aircraft ultimately lands safely.

The threats followed several other recent aviation security alerts, including an incident in which Hungarian fighter aircraft escorted a passenger flight that had been diverted to Budapest. Security officials have not publicly identified a perpetrator or established a definitive connection between all the incidents. The absence of explosives does not remove the need to investigate threats, because hoax warnings can still expose passengers and aviation operators to serious disruption and additional operational risks.

Which European flights were affected by the November 3 bomb threats?

Two flights bound for Warsaw were among the services affected during the series of alerts. Scandinavian Airlines Flight SK751 from Copenhagen landed at Warsaw Chopin Airport, where security authorities conducted an inspection and temporarily restricted use of a runway. A LOT Polish Airlines flight travelling from London Heathrow was diverted to Warsaw Modlin Airport, which briefly suspended operations while the aircraft and surrounding facilities were checked.

Authorities in Poland reported that the aircraft landed safely and that no explosive devices were discovered during the inspections. Modlin Airport subsequently resumed normal operations after the security alert was cleared. The incidents nevertheless demonstrated how threats involving separate flights can disrupt multiple airports serving the same metropolitan area.

Italy experienced similar security alerts involving Ryanair flights arriving at Rome Fiumicino Airport. Italian Air Force Eurofighter aircraft escorted a Ryanair service from Dublin after a suspected onboard threat was reported, and the aircraft landed safely. Another Ryanair flight arriving from Lisbon was subjected to security procedures, with airport authorities reporting that checks did not identify explosives.

In Spain, airport operator Aena activated emergency procedures following a bomb alert involving a Ryanair flight from Manchester to Murcia. The aircraft landed without incident and was examined by the Guardia Civil before the alert was lifted. The response involved security restrictions intended to protect passengers and airport personnel while allowing authorities to determine whether the warning represented a credible threat.

Bulgaria also reported alerts involving aircraft travelling to Sofia, including Wizz Air and Ryanair services. Security personnel inspected the affected aircraft after arrival, and no explosive devices were found. The incidents formed part of a wider series of warnings affecting different airlines, routes and national aviation authorities.

Why did fighter jets escort passenger aircraft during the European bomb scares?

Military aircraft may be deployed when authorities receive information suggesting a potential threat involving civilian aviation. Such operations allow defence personnel to monitor an aircraft, maintain contact with relevant authorities and provide support while air traffic controllers coordinate a safe landing. The decision to deploy fighter aircraft reflects the need to manage uncertainty during an active security alert rather than confirmation that an explosive device is present.

The Italian Air Force responded to the threat involving the Ryanair flight from Dublin by sending Eurofighter aircraft to accompany it towards Rome. The aircraft subsequently landed safely at Fiumicino Airport, where security checks were conducted. Officials did not report finding explosives, and the alert was eventually cleared.

A related incident occurred on 2 November when a Wizz Air flight travelling from London Luton to Sofia was diverted to Budapest following a bomb threat. Hungarian Gripen fighter aircraft were deployed to escort the plane, demonstrating the role national defence forces can play in responding to aviation security incidents. The previous day’s alert added to concern when several more threats emerged across Europe on Tuesday.

Security responses can vary according to the information available, the aircraft’s position, airspace conditions and national emergency procedures. Authorities may choose to divert a flight, isolate an aircraft after landing or suspend airport operations while inspections are completed. These precautions can create inconvenience and significant disruption, but they are intended to reduce the consequences if a warning later proves credible.

What happened to the cruise ship targeted by a bomb threat in Greece?

The series of threats extended beyond aviation when an Israel-bound cruise ship, the Crown Iris, received a bomb warning while near the Greek island of Syros. The vessel, carrying approximately 1,500 passengers and crew, was subjected to security procedures after a warning claimed that an explosive device had been attached to its hull. Greek authorities conducted inspections, including checks involving specialised personnel.

No explosive device was discovered during the reported searches, and the vessel was expected to continue its voyage after the necessary security procedures. The incident highlighted the additional complexity of responding to threats involving passenger ships, where evacuation and inspection arrangements differ from those used at airports. Maritime authorities must consider the vessel’s location, passenger numbers, access to port facilities and the availability of specialist equipment.

Cruise ships and airports share a dependence on reliable threat assessment and coordinated emergency communications. Even when a warning proves false, operators may need to interrupt scheduled services and commit resources to passenger safety. The resulting disruption can affect travel plans, operational costs and confidence in the affected routes.

Were the bomb threats across Europe coordinated?

Authorities had not established a confirmed connection between all the threats as of 4 November. No organisation had publicly claimed responsibility, and officials had not identified a perpetrator or attributed the incidents to any government. Investigations were continuing into how the warnings were communicated and whether common characteristics could help establish their origin.

The number of incidents occurring over a short period has raised questions about whether the threats were intended to create maximum disruption across European transport networks. Security analysts noted that the range of airlines and destinations affected was unusual, suggesting that disruption itself could have been an objective. However, such assessments remain interpretations of the available pattern rather than evidence identifying a specific actor.

European governments have separately expressed concerns about cyberattacks, sabotage and other forms of disruption affecting civilian infrastructure. Those concerns provide background to the heightened attention surrounding the aviation incidents, but they do not justify attributing these particular bomb threats to Russia, Iran or any other state without supporting evidence. Officials have not established such a connection.

Investigators may examine communications records, threat messages, technical indicators and the timing of the incidents to determine whether they originated from a common source. The results of those inquiries will be necessary before stronger conclusions can be drawn about coordination or motive.

How do hoax bomb threats affect airlines, airports and passengers?

Security alerts can impose significant operational costs even when no physical threat is ultimately identified. Aircraft diversions require additional fuel, airport coordination, ground handling and changes to crew schedules, while temporary closures can affect other services using the same facilities. Airlines may also face passenger rebooking, accommodation and customer service expenses depending on the circumstances.

Airport operations rely on carefully coordinated schedules, making unexpected restrictions capable of producing delays beyond the directly affected flight. A temporary runway closure can influence arriving and departing aircraft, while additional security inspections may limit the availability of airport personnel and specialised equipment. The scale of disruption depends on traffic levels, the duration of the alert and how quickly normal operations can resume.

For passengers, the immediate priority is accurate communication about safety, diversions and onward travel arrangements. Airlines and airports must balance the need to avoid unnecessary alarm with the obligation to provide reliable information during rapidly developing incidents. Delays caused by security threats may also raise questions about passenger rights, although compensation and assistance obligations depend on the applicable legal framework and individual circumstances.

The wider economic consequences are difficult to quantify without detailed operational data from affected airlines and airports. However, repeated incidents could increase the need for additional security resources and contingency planning, particularly if authorities conclude that malicious actors are attempting to exploit the disruptive potential of false warnings.

What is the latest status of Europe’s November 3 aviation bomb threats?

All affected passenger flights identified in the reported series landed safely, and authorities reported finding no explosive devices during their inspections. Airport restrictions were subsequently lifted as individual alerts were cleared, while investigations into the origin of the threats continued. The cruise ship in Greece was also searched without a reported explosive discovery.

The principal unresolved question concerns responsibility rather than the immediate safety of the aircraft involved. Until investigators establish whether the incidents were connected, claims of a coordinated campaign or foreign involvement remain unproven. The episode demonstrates the operational consequences of security warnings across an interconnected European transport network, even when the threats themselves ultimately prove false.