Italian Schools and Ryanair Flights Targeted by Coordinated Bomb Threats
Authorities investigate anonymous emails claiming IRGC affiliation following widespread school evacuations and aviation alerts.
1Coordinated Threats Target Schools
On November 2, 2026, 271 Italian schools received anonymous emails claiming to represent Iran's Islamic Revolutionary Guard Corps. The messages threatened the use of ammonium nitrate explosives and remote detonators. Principal Anna Fucile evacuated 1,800 pupils from the Giovanni Cagliero complex to Villa Lais, while police conducted thorough searches of the premises.
2Specific Targeting of Ryanair Flight
The threatening email specifically identified Ryanair flight FR4438, traveling from Riga to Rome Fiumicino, while the aircraft was airborne. This direct naming of an active flight heightened security concerns across Italian transport hubs. Despite the graphic nature of the threats, bomb-disposal teams and detection dogs found no explosives at the school complex.
3Escalation to European Aviation Sector
On November 3, the situation expanded as multiple Ryanair flights arriving in Rome faced separate bomb alerts. Italian Air Force fighter jets were deployed to escort a flight from Dublin to Fiumicino. Both the Dublin and Lisbon arrivals underwent intensive security inspections, but authorities confirmed that no explosive devices were located on board.
4Widespread Disruptions Across Europe
The security alerts extended beyond Italy, impacting various European carriers throughout November 3. Flights operated by Wizz Air, LOT Polish Airlines, and Scandinavian Airlines faced diversions or emergency inspections in countries including Poland, Bulgaria, and Hungary. These incidents caused significant operational disruptions, though subsequent searches consistently yielded no evidence of actual explosive threats.
5Investigation Into Email Origins
The Italian Postal Police have launched a formal investigation into the origin and content of the threatening emails. Reports indicate the messages utilized a fake email address associated with Egypt's education ministry. Investigators have not yet verified the sender's claimed IRGC affiliation or established a definitive link between the school threats and aviation alerts.
6Lack of Verified Connections
Despite the temporal proximity of the school emails and the aviation incidents, Italian authorities have not publicly established a connection between them. Investigators have also found no links between the Fiumicino alerts and similar threats reported elsewhere in Europe. The sender's identity remains unknown, and the claims of Iranian state involvement remain entirely unverified.
7Operational Response and Security Protocols
Emergency procedures were activated across multiple Italian regions, including Lazio, Veneto, Lombardy, and Liguria. Schools followed established evacuation protocols, while airports coordinated with military and police forces to manage the threats. These precautionary measures ensured the safety of pupils and passengers, even as the source of the coordinated campaign remained elusive to authorities.
8Current Status of Security Investigations
As of the latest updates, all affected schools and aircraft have been cleared by security teams. The investigation continues to focus on the digital footprint of the emails and the potential for coordinated malicious activity. Authorities remain cautious, treating the incidents as serious security breaches while continuing to analyze the lack of evidence.