'Too early' to say if Europe flight bomb threats linked, EU says

On Thursday, a wave of fake bomb alerts forced at least 27 commercial flights to change course, land under military guard or undergo exhaustive inspections. Low‑cost carriers bore the brunt – Ryanair was targeted on seven occasions, while Aer Lingus, Finnair, Wizz Air and others saw aircraft escorted by French Rafales, Italian jets or Bulgarian fighters. The incidents spanned three days, affecting routes to and from Bulgaria, Italy, the Czech Republic and beyond, yet no explosives were ever found.

EU transport commissioner Apostolos Tzitzikostas posted, "Any threats against civilians are unacceptable," and added that it was "too early to draw conclusions on whether the reported incidents are linked." Brussels said it was monitoring the situation with national authorities, but stopped short of labeling the alerts as coordinated.

The practical fallout for travelers was immediate and palpable. Hundreds of passengers were rerouted, with 151 on the Aer Lingus Dublin‑Rome service taken to a French air base before being reassigned. Ryanair flights bound for Sofia from Copenhagen, Madrid and London were diverted, two landing in Sofia and one in Plovdiv, each inspected by bomb experts. Finnair’s Helsinki‑Rome flight received a fighter escort to Rome, while a parallel Helsinki‑Vienna service landed as scheduled after a threat was assessed.

The EU’s measured response reflects a balance between vigilance and restraint. By refusing to label the alerts as linked, Brussels keeps investigative avenues open while avoiding premature attribution that could inflame public fear or diplomatic tensions. Simultaneously, national air forces have demonstrated rapid deployment capabilities, a reminder of post‑9/11 security doctrines that still shape European airspace. If a coordinated actor emerges, the existing multinational coordination could accelerate a joint criminal investigation; if the threats remain disparate, airlines may tighten email‑screening and passenger‑verification procedures to pre‑empt future hoaxes.

Until such evidence surfaces, the EU and member states will continue to treat each alert as a serious security incident, balancing the need for swift protective action with the imperative to avoid speculation.