A wave of bomb threats targeting European passenger aircraft has triggered widespread security alerts, flight diversions and extensive police operations, with aviation experts warning that the scale and frequency of the incidents could point to a coordinated campaign designed to disrupt air travel.

At least 25 flights across Europe were affected on Thursday, according to the latest Reuters reports, following a series of similar incidents earlier in the week that resulted in eight aircraft being grounded.

Although every threat investigated so far has proved false, the geographical spread of the warnings and the involvement of numerous airlines have raised concerns about the possibility of an organised operation rather than isolated hoaxes.

The incidents come against a backdrop of heightened geopolitical tensions, cyberattacks and drone incursions into European airspace, prompting questions about whether aviation infrastructure is becoming another target in a broader campaign of disruption.

Aviation industry sources also point to the growing role of artificial intelligence in the economy, warning that cybersecurity challenges are likely to intensify as technology becomes increasingly embedded in critical infrastructure.

Airports and airlines have traditionally been attractive targets for cybercriminals and other malicious actors. Industry representatives note that waves of threats across Europe can also encourage copycat incidents, potentially extending disruption to additional countries, including Greece.

Two Aegean flights targeted by bomb threats

Among the latest incidents were two flights operated by Greek carrier Aegean Airlines, one travelling from Thessaloniki to Milan and the other from Athens to Vienna.

The airline confirmed that it had received bomb threats concerning flight A3552 from Thessaloniki to Milan and flight A3860 from Athens to Vienna.

Both aircraft landed normally at their destinations, where the relevant authorities implemented the required security procedures. No suspicious devices were discovered, and the threats were subsequently declared unfounded.

In its official statement, Aegean said it had immediately coordinated with the competent authorities and followed all established security protocols. Once the checks had been completed and the threats confirmed to be false, the aircraft departed from the respective airports.

“The safety of our passengers and crews is and will continue to be our highest priority,” the airline said.

According to Italian news agency ANSA, the Aegean flight from Thessaloniki landed at Milan Malpensa Airport at 9.33am.

Another bomb threat was reported involving Ryanair flight FR8953, which departed Porto, Portugal, and arrived at Malpensa at 10.22am.

Police bomb disposal specialists were deployed at the Italian airport, where the aircraft were evacuated and checks were conducted on passengers and staff.

Bomb threats involving commercial aircraft remain relatively rare and almost invariably turn out to be hoaxes. More than 30,000 flights operate across European airspace on an average day.

Nevertheless, the sudden concentration of incidents has alarmed aviation authorities, particularly amid wider concerns about cyberattacks on supermarket refrigeration systems, drone incursions and escalating geopolitical tensions.

At least 25 flights affected across Europe in one day

The scale of Thursday’s disruption represented a significant escalation compared with earlier incidents.

According to Reuters, at least 25 European flights were affected by bomb threats, just days after similar warnings resulted in eight aircraft being grounded.

Police and counterterrorism units were mobilised to inspect aircraft arriving at airports in Italy, Poland, France, Austria, Bulgaria, Romania and the Czech Republic.

In several cases, pilots were forced to divert to alternative airports after threats were received while their aircraft were already airborne.

Airlines affected by the latest wave included Ryanair, easyJet, Wizz Air, Aer Lingus, Aegean, Finnair and Poland’s LOT.

All the warnings investigated by the relevant authorities have so far proved false.

However, the number of incidents marked a sharp increase from Tuesday, when seven flights were grounded following false bomb warnings. Another incident had been reported on Monday.

The rapid succession of threats has raised fears that the primary objective may be to cause widespread operational disruption, rather than target a particular aircraft or destination.

From Glasgow to Rome: The flights caught up in the alerts

An Aer Lingus flight travelling from Dublin to Rome was diverted to a military airbase at Évreux in France, where authorities carried out a security inspection of the aircraft.

A Wizz Air service from Milan to Warsaw was also diverted after a bomb threat was received while the aircraft was airborne.

The airline confirmed that the flight was redirected to Vienna.

Another Wizz Air aircraft, operating a service from Milan to Bucharest, landed safely in the Romanian capital before undergoing security checks.

In Bulgaria, a Ryanair flight from London Stansted to Sofia was diverted to nearby Plovdiv Airport on Thursday morning following a similar warning.

Two additional Ryanair flights bound for Sofia, which had departed Copenhagen and Madrid, were inspected after landing.

At Milan Malpensa Airport, security operations were launched in response to threats involving the Aegean service from Thessaloniki and the Ryanair flight from Porto.

Polish airline LOT was also affected.

A flight from Warsaw to Paris underwent checks following a warning received by the airline, while another LOT service heading to Brussels received a bomb threat while airborne and was inspected after landing.

One of the most striking incidents occurred in Italy, where Italian Air Force fighter jets escorted a Finnair flight travelling from Helsinki to Rome after a threat was issued during the journey.

A second Finnair service bound for Vienna, operated by JetTime, also received a false bomb warning but landed safely, according to the airline.

In the Czech Republic, police reported threats involving four flights scheduled to arrive at Prague Airport.

Authorities said they considered the likelihood of the threats being genuine to be low.

Two of the aircraft were easyJet services departing Glasgow and Newcastle, the airline confirmed.

My statement on Reported Bomb Threats Affecting European Flights https://t.co/dWcLSVz82b

— Apostolos Tzitzikostas (@tzitzikostas) November 5, 2026

EU activates European information-sharing mechanism

The unprecedented concentration of incidents prompted a coordinated response at European level.

European Commissioner for Sustainable Transport and Tourism Apostolos Tzitzikostas announced that the European information-sharing mechanism had been activated following the wave of threats.

He said the European Commission was closely monitoring developments and maintaining continuous contact with the affected member states and the European Union Aviation Safety Agency (EASA).

The commissioner stressed that the safety and protection of citizens remained an absolute priority for the European Union, describing any threat against civilians as unacceptable.

He also urged national authorities to strengthen cooperation with airport operators, airlines and police forces to ensure that threats were handled effectively and established security procedures were followed.

However, Tzitzikostas cautioned against drawing premature conclusions about the origin of the incidents.

He made clear that it was too early to determine whether the threats were connected, as investigations by national authorities were still under way.

Experts suspect an organised campaign rather than isolated hoaxes

The frequency and geographical spread of the warnings have prompted aviation security specialists to question whether the incidents could be linked.

When an airline receives a warning about a possible explosive device, established security procedures must be activated immediately.

Depending on the circumstances, the aircraft may continue to its scheduled destination or divert to the nearest suitable airport.

Specialist police units then inspect the aircraft and its contents, with the process sometimes taking several hours.

Even when a threat proves false, the resulting disruption can be significant, causing delays, schedule changes and considerable anxiety among passengers.

Although false bomb warnings are not unusual, experts argue that such a high number of incidents within a short period is difficult to explain as a series of entirely unrelated events.

Matt Borie, head of aviation security company Osprey Flight Solutions, suggested that the pattern indicated a possible connection between the threats.

“The frequency of the threats suggests there is some connection, either to a particular individual or an organised group campaign, rather than a series of isolated copycat incidents,” he told the Financial Times.

Borie also highlighted the apparent absence of a specific target.

Rather than concentrating on one country, airline or route, the warnings have affected services across multiple European markets.

“The fact that no particular country, airline or route stands out as a target suggests that the aim is to cause widespread disruption to aviation operations,” he said.

This assessment has reinforced concerns that the objective of those responsible may be to overwhelm security systems, interrupt airline schedules and spread uncertainty across Europe’s aviation network.

Could the threats be part of a hybrid warfare campaign?

The possibility of hybrid warfare has also entered the debate, with security specialists considering whether the incidents could form part of a wider effort to destabilise European infrastructure.

Erik Schouten, head of aviation security company Dyami, pointed out that many of the countries affected by the threats are supporters of Ukraine in its war against Russia’s invasion.

Speaking to Reuters, he suggested that the geopolitical context should not be overlooked when assessing the latest incidents.

“From a geopolitical perspective, we must always consider the possibility of hybrid warfare, where a country – and today we are looking at Russia, right? — attacks us simultaneously on multiple fronts, from railways and supermarkets to blood banks, as happened recently. The energy sector, the internet and aviation are also among the targets,” he said.

While such assessments raise the possibility of a broader campaign targeting European infrastructure, there is currently no confirmed evidence establishing who is responsible for the bomb threats or whether the incidents are centrally coordinated.

For European aviation authorities, the immediate priority remains ensuring passenger safety, maintaining operational continuity and establishing whether the warnings represent an organised attempt to disrupt the continent’s air transport network.