Andrea Innocenti A series of emailed threat reports have caused chaos in European skies, with several aircraft diverted, military escorts deployed, and emergency procedures activated in multiple countries. The letters, often written in Italian and signed by a group calling themselves " Fighters of the Male State ," indicated the presence of explosive devices on specific flights, including AY1761 (Helsinki-Rome) and a flight from Dublin to Rome.
Email threats and routes affected on November 5, 2026
On the morning of November 5, 2026, airport authorities received messages with the subject "threat report" listing flights presumed to have been affected. Some aircraft were escorted by military fighter jets, others made emergency landings at alternative hubs: the Aer Lingus flight from Dublin to Rome was diverted to Évreux-Fauville, Normandy, with the evacuation of the 151 passengers and six crew members after landing and the intervention of bomb squads.
Interventions and procedures activated
Civilian and military resources were mobilized to respond to the threats: Eurofighters from the Italian Air Force scrambled to intercept the aircraft, while a Rafale escorted the hijacked flight in France . Standard security procedures included evacuating the aircraft, inspecting them, and clearing the affected areas, as well as screening passengers and baggage according to established protocols.
Spread of warnings across Europe and findings from investigations
In addition to flights to Rome, threats have been reported for connections to Prague, Sofia, Warsaw, Vienna, Bucharest, and other airports. In many cases, ground inspections did not detect any devices, meaning authorities have repeatedly classified the incidents as unfounded , despite maintaining high security measures to protect passengers and airport staff.
Investigative hypotheses and operational context
European authorities and intelligence agencies have launched investigations to trace the servers and IP addresses from which the emails originated. Experts have hypothesized a coordinated swatting effort or a hybrid operation aimed at creating disruption and instability. In recent days, reports have been reported at a rate well above the historical monthly average, raising suspicions about the methods and organization behind the attacks.
The government's response was immediate: transportation and public safety officials reiterated that the priority remains the protection of civilians and that every threat is treated with the utmost seriousness. Meanwhile, investigations are continuing to identify those responsible and verify any links between the individual incidents.
Operational results and impact on passengers
Despite the mobilization and numerous hijackings, bomb squads and police found no explosive devices aboard the inspected flights. Some planes, including Finnair flights from Helsinki, landed regularly after clearance operations; others were forced to use alternative landing sites, with logistical consequences and delays for hundreds of passengers.
Travelers' accounts describe the anxiety and confusion on board: passengers were disembarked on secondary runways, the sight of emergency vehicles, and the presence of police and bomb squad personnel before they could leave the airport. The airlines involved stated that they had implemented required safety procedures and were cooperating with authorities in the ongoing investigation.
The series of alerts has thus highlighted the fragility of civilian air routes in the face of threats announced via email and the importance of international cooperation between airlines, airport operators, and security forces to manage complex crises without causing panic. Technical investigations to trace the origin of the communications are still ongoing and will be crucial to establishing responsibility and the nature of the attack.