Hoax Bomb Threats Hit 25 European Flights: Hybrid War Guide

Hoax bomb threats disrupted at least 25 European flights on 5 November 2026, forcing emergency landings and diversions across at least 16 countries, according to CNBC and WhichTerminal. The warnings affected routes and airports in Italy, Ireland, the UK, Spain, Bulgaria, Romania, Poland, Finland, Austria, Denmark, Belgium, Portugal, France, Greece, Serbia and Czechia. No explosives were found, but the coordinated timing has renewed fears of hybrid warfare against European civilian infrastructure.

What happened on 5 November 2026?

The wave of false alerts began on 2 November and escalated sharply on 5 November, when at least 25 flights were targeted in a single day. The UK government called the episode a malicious hoax threat, and Irish officials described it as a likely co-ordinated campaign of disruption. Airlines affected included Ryanair, Wizz Air, Aer Lingus, easyJet, LOT, Finnair, Iberia, Air Europa, Air Serbia and SAS. The most dramatic incident involved Aer Lingus flight EI402 from Dublin to Rome, which diverted under fighter escort to a French military base in Normandy. Finnair said two Helsinki flights received unfounded threats and landed safely in Rome and Vienna, while Wizz Air confirmed threats on Milan–Bucharest and Warsaw-bound services. All aircraft were cleared after security checks, and the EU activated its aviation security information-sharing mechanism. This episode has put renewed pressure on European aviation security protocols.

Why do experts suspect hybrid warfare?

Security analysts say the campaign was more systematic than past copycat hoax calls because it targeted specific in-flight aircraft, triggering international rules that require immediate landing, evacuation and searches. The Atlantic Council's Elisabeth Braw described the pattern as gray zone warfare designed to sow fear and disruption. Spanish and Italian officials called it hybrid aggression against civilian infrastructure, while the Kremlin denied involvement. Two pro-Russian hacktivist groups separately claimed cyberattacks on European supermarket refrigeration and French blood banks, deepening concerns about a broader hybrid warfare tactics campaign. Unlike conventional attacks, these operations are designed to remain below the threshold of armed conflict while imposing real economic and psychological costs.

Airline and airport impact: diversions, costs and compensation

Every diversion forces an aircraft out of its planned schedule and can cost an airline up to $250,000, according to security experts cited by CNBC. The knock-on effects ripple through crew hours, aircraft rotations and passenger connections, straining a network built for predictability. Below are some of the confirmed incidents:

For passengers, these threats are treated as extraordinary circumstances under aviation rules, so cash compensation is unlikely. However, airlines must still provide food, accommodation and the choice of rerouting or a refund. Travellers affected by similar events should keep receipts and check their rights under airline passenger compensation rules. Analysts also warn that the same logic could extend to railways and highways, making resilience planning a priority for transport infrastructure security.

FAQ: Hoax bomb threats and European flights

What happened on 5 November 2026?

At least 25 flights across Europe were disrupted by hoax bomb threats, forcing emergency landings and diversions in at least 16 countries. No explosives were found.

Were any explosives discovered?

No. All affected aircraft were cleared after security checks, and authorities found no immediate danger on any flight.

Why are these threats considered hybrid warfare?

Experts say the coordinated, systematic targeting of in-flight aircraft—rather than isolated copycat calls—fits a gray zone warfare pattern aimed at disruption and fear without open conflict.

Can passengers get compensation for diverted flights?

Cash compensation is unlikely because security threats count as extraordinary circumstances, but airlines must still provide care, rerouting or a refund.

Which countries were affected?

The threats touched airports and routes in Italy, Ireland, the UK, Spain, Bulgaria, Romania, Poland, Finland, Austria, Denmark, Belgium, Portugal, France, Greece, Serbia and Czechia.

What happens next?

Investigators in France, Denmark, Czechia and other countries are examining whether the threats are linked, while the EU's aviation security information-sharing mechanism remains active. The incidents come two days after similar hoax alerts and are being examined for signs of a coordinated effort, sharpening concerns about hybrid warfare and aviation security in Europe. Authorities have not confirmed responsibility, but the pattern has already prompted calls for tighter coordination among airlines, airports and national security agencies. For now, passengers should expect additional security checks and possible schedule disruption as carriers respond to each threat with maximum caution.

Sources: CNBC, CNBC analysis, TIME, WhichTerminal