# Wave of Cyberattacks and Bomb Threats Disrupts European Infrastructure Coordinated threats targeting media, aviation, and retail systems trigger widespread security investigations across Europe. - **Source:** [RTÉ News](https://www.rte.ie/news) - **Published:** 2026-11-06 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/aa744d29-9cd0-47e5-ad6b-ada75e6418a0 ## Coordinated Disruption Across Europe A series of security incidents disrupted European infrastructure throughout the week, including bomb threats against flights and cyberattacks on retail refrigeration systems. Media organizations in Ireland and the UK received threatening emails on Friday, while aviation authorities reported widespread flight diversions. Officials are currently investigating whether these events represent a coordinated campaign. ## Retail Refrigeration Systems Compromised On Monday, cyberattacks targeted refrigeration controllers in supermarkets across eight European countries, including 13 SuperValu stores in Ireland. Systems manufactured by Danfoss and Copeland/Dixell were compromised, causing temperatures to spike. While pro-Russian hacking groups claimed responsibility, the Kremlin dismissed these allegations as absurd, citing a complete lack of verifiable evidence. ## Aviation Sector Under Siege Bomb threats caused significant disruption to European airspace, impacting at least seven flights on Tuesday and 27 more on Thursday. Several aircraft, including Ryanair and Aer Lingus flights, required military escorts and emergency diversions. Despite these intense security measures, no viable explosive devices were discovered during any of the thorough airport searches. ## Email Threat Analysis The threatening email sent to media outlets on Friday originated from a Lithuanian school domain. Technical analysis suggests the message passed through authorized Microsoft infrastructure, making simple spoofing unlikely. Cybersecurity experts believe the sender likely gained unauthorized access to a legitimate account, a method consistent with previous threats observed in recent months. ## Compromised Credentials as Vector Researcher Maciej Makowski identified that the email account used for Friday's threat had credentials exposed in at least two prior data breaches. This pattern mirrors earlier threats against schools in Carlow, where attackers utilized compromised university and Gmail accounts. These incidents highlight the persistent risk posed by reused passwords and leaked data. ## Lack of Direct Evidence While Friday's email claimed responsibility for the earlier airline threats, investigators have found no independently verifiable evidence linking the two. The messages share broad characteristics, such as vague political grievances and short deadlines, but they do not name specific buildings or recipients. Authorities remain cautious about establishing a common source. ## Security Cooperation and Response An Garda Síochána and the Irish Defence Forces are actively liaising with European security counterparts to identify the perpetrators. The government acknowledged the potential for a coordinated disruption campaign, noting that security services were already planning for EU Presidency events. Investigations are ongoing to determine if these are individual or organized acts. ## Challenges in Attribution Attributing these attacks remains complex, as investigators must distinguish between legitimate account activity and unauthorized takeovers. Success depends on analyzing the duration of account compromise and identifying patterns across multiple incidents. Until forensic evidence links specific actors to the disruptions, the true origin of these widespread threats remains officially unresolved. ## Sources covering this story - https://www.rte.ie/news/primetime/2026/1106/1598298-a-week-of-cyberattacks-and-bomb-threats-what-do-we-know/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._