Which Planes Diverted and What Was Found?
Two Flights Were Heading For Rome When The Same Anonymous Email Raised The Alarm.
Passengers who left Dublin for Rome on Thursday 5 November 2026 landed at a military airfield in Normandy. Those who left Helsinki for the same destination reached Rome under Italian fighter escort. Police sources in Italy linked the two alerts to a single email sent to Rome’s airport operator and other companies that morning.
At least 14 commercial flights across Europe were the subject of bomb threats on Thursday. Some diverted, others reached their destinations, and one aircraft in Warsaw was stopped before take-off. By midday UK time, no explosives had been reported in the searches whose results were public. French specialists were still examining the Dublin aircraft in the latest public account. Authorities had named no suspect.
The email offers a lead in two cases. One of the hardest questions for investigators is how far that lead takes them across the rest of Europe.
What Did Search Teams Find?
In Prague, police gave a clear answer for four aircraft. Officers had gone to Václav Havel Airport after receiving warnings about explosives on board. All four searches came back clear.
In Rome, bomb-disposal specialists completed their inspection of the Finnair aircraft from Helsinki and found no explosives. In Brussels, LOT Polish Airlines said the search of its aircraft from Warsaw turned up nothing suspicious or hazardous. A Warsaw-bound flight that landed in Vienna was able to continue its journey after checks there also came back clear.
The position in France was different when authorities gave their update. Aer Lingus flight EI402 had landed safely at Évreux-Fauville, with all 151 passengers and six crew safe. The French government confirmed that a bomb-disposal team was examining the Airbus A320. That left two separate pieces of news for families waiting in Rome. Everyone on board was safe. The search result was still outstanding.
Which Planes Diverted?
Three Ryanair flights bound for Sofia illustrate why the number of threatened flights is higher than the number of diversions. The services from Copenhagen and Madrid both landed in Sofia. The flight from London Stansted went to Plovdiv instead. For passengers on the London service, the alert changed where their journey ended. For those on the other two, the airport receiving them could prepare for their arrival.
In Warsaw, a LOT aircraft bound for Paris was already taxiing when it was stopped. Passengers transferred to another aircraft, and one runway at Chopin Airport closed temporarily during security checks. In that case, the warning affected an airport’s capacity before the threatened flight had even left the ground.
Thursday’s incidents followed an earlier series on Tuesday 3 November. A LOT flight from Heathrow landed at Warsaw Modlin instead of Warsaw Chopin. After inspectors found nothing suspicious, passengers completed the journey between airports by coach. A Ryanair service from Manchester reached Murcia, where Spain’s Civil Guard ruled out explosives after a search. Those earlier results help explain the scrutiny of Thursday’s warnings. They could offer little reassurance to a crew deciding where to land before anyone had inspected its own aircraft.
Who Are the Suspects?
As of midday on Thursday, authorities had publicly identified no individual, organisation or government as responsible. The most specific lead concerned the two Rome-bound services. According to police sources in Italy, an anonymous message written in Italian reached Rome airport operator Aeroporti di Roma and affiliated companies early that morning. It referred to the flights from both Helsinki and Dublin.
That detail gives investigators a reason to examine those two alerts together. The language of the message tells them what its recipients read. It reveals little by itself about the writer’s nationality or location. And although one message reportedly identified two aircraft, the public evidence does not establish who sent the warnings involving Prague, Warsaw or Sofia.
The distinction matters because the count of affected flights can give a misleading impression of what investigators know. Fourteen threatened aircraft need not mean fourteen senders, fourteen messages or a single organiser. To connect more of the cases, investigators would need evidence from the communications themselves. An original message containing several flight details would carry more weight than a resemblance between two warnings that had already become public.
What Are the Geopolitical Impacts?
The clearest geopolitical consequence was visible on a single route. An Irish airline carrying passengers to Italy landed at a French military base after a warning reportedly sent to companies in Rome. The people who received the message, the crew who had to act on it and the specialists who could search the aircraft were in different places. Comparing their records requires cooperation across borders, even if the sender turns out to have acted alone.
European governments were already concerned about sabotage and other forms of disruption that can impose costs while leaving responsibility difficult to establish. Officials have accused Russia and Iran of involvement in other such activity, allegations both governments deny. No government had publicly attributed these aviation threats to either country. Earlier disputes explain why officials are alert to the possibility of state involvement. They supply no evidence about the author of Thursday’s messages.
What the incidents do demonstrate is how widely the cost of a warning can spread. The sender of the Rome email could reach several recipients at once. The response required separate decisions about two aircraft, an escort in Italy and a search team in France. If disruption was the aim, some of that disruption had already occurred by the time specialists could examine either plane. Whether anyone intended a political effect remains an open question.
What Happens Next?
For passengers, the answer depends on the aircraft. Aer Lingus said it would arrange onward travel for its customers. In Vienna, one cleared flight continued to Warsaw. In Warsaw itself, LOT moved its Paris passengers to another plane. Travellers following the story should check their own flight number with the operating airline. A report that one aircraft has been cleared says little about the departure time of another.
For investigators, the next useful development would be a verifiable connection between more of the warnings. Did other airports receive the same original email? Did different messages contain details that had yet to appear publicly? Evidence of that kind could narrow the inquiry even before police were ready to name anyone. A final search result from Évreux would answer a different, more immediate question about one aircraft.
For the families of those aboard EI402, the first question already had an answer on Thursday morning. All 157 people reached the ground safely. Finding out who put them on a French airfield instead of a runway in Rome will take evidence that an aircraft search alone cannot provide.
Sources
Reuters — Thursday’s flight alerts, airline statements and the position on attribution
Associated Press — Search results in Prague, Rome, Brussels and Vienna
The Guardian — Italian police sources on the email concerning the two Rome-bound flights
Financial Times — At least 14 aircraft affected by Thursday’s warnings
Sky News — Tuesday’s alerts involving flights from Heathrow and Manchester
