Connected Situation / Through 2026-11-05

European Bomb-Threat Reports

stories
19
events
2
entities
38
connections
19
Retained edition
Evidence so far on 2026-11-05 UTC · updated 2026-11-05 11:23 UTC · analysis as of 2026-11-05 10:27 UTCSign in for the live Situation ↗
Narrative

As-of analysis

Carried forward
Situation at a glance

On 3 November 2026, bomb threat callers disrupted Ryanair flights at Warsaw Chopin Airport, in the Event “Bomb threat callers disrupt Ryanair flights across Europe”; “Bomb threats disrupt flights across Europe” is dated 4 November. Stories dated 4 November describe wider flight and ship disruptions, including “Bomb threats disrupt flights and a ship across Europe” and “False bomb threats target a dozen European flights and a cruise ship.” A separate Event dated 4 November names an unidentified email sender threatening 271 Italian schools and Gianni Rodari Elementary School as its target; “Rome school evacuated after spoof email to 271 Italian schools impersonates Iran's Revolutionary Guard” describes the email as impersonating the group, not as sent by it. “Rome school evacuated after email bomb threat targets 271 Italian schools” reports an evacuation, while “False bomb threats target 280 Italian schools and two Rome-bound planes” gives a different school total. Other headlines extend the reported targets to Bulgarian aircraft and courthouses, while “Putin accused of bomb threats grounding flights and cyberattacks disrupting European fridges” presents an accusation rather than an established attribution.

Footnotes[14][17][3][1][5][18][8][15][6][2][11][4]
Assessment

The two coded Events describe distinct incidents: callers and Ryanair flights in Warsaw, and an unidentified email sender and a Rome school. Accepted links group several flight reports and the Italian school reports with broader coverage, but do not establish a common sender or coordination across the incidents. The headlines differ in stated scale: one describes seven passenger planes, another a dozen flights and a cruise ship; the school headlines give totals of 271 and 280. Ryanair is a mention in the linked Stories, not a canonical Event participant, and the Putin headline does not establish responsibility.

Footnotes[14][15][21][19][20][7][5][8][2][16][4]

Explanation originally captured 2026-11-05 · Evidence through 2026-11-05 UTC · Source edition sed_a6749962244e3fc87d7ea8ace59e0b55

What informs this explanation
  • Complete retained Story and Event membership
  • Daily reporting and coded-occurrence time steps
  • Event taxonomies, metrics, units, and denominators
  • Canonical Entities and recorded actor/target bindings
  • Typed reporting, membership, and incident edges
  • Changes against the preceding retained edition
  • Permitted macro, public-record, and asset facts only when they were retained with an explicit source and observation date
Quantitative

Evidence in numbers

This retained edition
  • Scope

    A 2-day Situation represented by 2 coded Events carried across 19 member Stories.

  • Coded activity

    The coded activity is led by CR01 · Homicide or Violent Crime (1) and CR10 · Police Investigation or Operation (1).

  • Prominent subjects

    🇮🇹Italy and 🇵🇱Poland are prominent in the retained actor and relationship evidence.

  • Entity coverage

    38 canonical Entities are linked to this edition.

Metric coverage. 2 coded Events · 2 CAMEO+ · 0 conflict. The four dimensions describe the CAMEO+ subset; conflict Events do not carry these scores.

Magnitude3
min 3max 3
2 measured
Systemic importance0.08
min 0.08max 0.08
2 measured
Propagation potential0.18
min 0.13max 0.23
2 measured
Market sensitivity0.18
min 0.05max 0.3
2 measured

Dot = mean · shaded span = observed range · position uses each metric’s defined scale.

All 6 scores, distributions & definitions

How the coder scored the full retained Event set

2 coded events — 2 CAMEO+

  • Significance · 20.23
    min 0.22max 0.25
  • Magnitude · 23
    min 3max 3
  • Systemic · 20.08
    min 0.08max 0.08
  • Propagation · 20.18
    min 0.13max 0.23
  • Market · 20.18
    min 0.05max 0.3
  • Confidence · 20.71
    min 0.69max 0.72

No conflict-family event here, so nothing carries a fatality count — a missing column, not a toll of zero. 2 sit outside POLITICAL, where Goldstein and quad class are undefined.

Significance

2 measured / 2 eligible · 0 missing · 0 not applicable

score (0 to 1) · Event-level distribution, not a Situation risk score.

across all 2 events

Magnitude

2 measured / 2 eligible · 0 missing · 0 not applicable

score (0 to 10) · Event-level distribution, not a Situation risk score.

across all 2 events — every one of them CAMEO+

Systemic

2 measured / 2 eligible · 0 missing · 0 not applicable

score (0 to 1) · Event-level distribution, not a Situation risk score.

across all 2 events — every one of them CAMEO+

Propagation

2 measured / 2 eligible · 0 missing · 0 not applicable

score (0 to 1) · Event-level distribution, not a Situation risk score.

across all 2 events — every one of them CAMEO+

Market

2 measured / 2 eligible · 0 missing · 0 not applicable

score (0 to 1) · Event-level distribution, not a Situation risk score.

across all 2 events — every one of them CAMEO+

Confidence

2 measured / 2 eligible · 0 missing · 0 not applicable

score (0 to 1) · Event-level distribution, not a Situation risk score.

across all 2 events

Metric definitions and limitations

This retained edition, independent of graph and page limits. Different dimensions, not a blended risk score; reported tolls may overlap.

Day by day2 reporting days · click a day to open or close it

2026-11-04analystlatest

Rome school-threat Event and dated coverage of flight and school incidents

The Rome school-threat Event is dated 4 November, and the Stories dated that day describe flight and ship threats, aircraft inspections and diversions, the Rome evacuation, the Italian school email, and other reported targets.

19+19
Stories · vs day before
10
Events · vs day before
83
articles
The lay of the land

Situation timeline

Threads
All 2 daysarticlesstoriesevents
11-0311-04
Loading Situation timeline…

What kind of event · 2 coded types

over 2 coded events on this edition

  • Crime2
    • CR01 · Homicide or Violent Crime1
    • CR10 · Police Investigation or Operation1

Countries · where it happened

Countries · who is acting

Salient structure

What holds this Situation together

Selected from the complete retained edition

Key threads

  1. core
    AnalystThreat reports affecting European flights and a ship

    The Warsaw/Ryanair Event anchors the flight strand; dated Stories also describe aircraft diversions, inspections and threats involving a ship. The Bulgaria and Putin headlines broaden the reported scope but do not establish a shared perpetrator.

    The Warsaw/Ryanair Event anchors the flight strand; dated Stories also describe aircraft diversions, inspections and threats involving a ship. The Bulgaria and Putin headlines broaden the reported scope but do not establish a shared perpetrator.

    Footnotes[14][3][1][5][7][9][10][11][12][13][4][22]
  2. development
    AnalystItalian school email threat and evacuation

    The 4 November Event identifies an unidentified email sender and Gianni Rodari Elementary School; related Stories describe a Rome evacuation and an email impersonating Iran's Revolutionary Guard. The Italian school headlines give differing totals.

    The 4 November Event identifies an unidentified email sender and Gianni Rodari Elementary School; related Stories describe a Rome evacuation and an email impersonating Iran's Revolutionary Guard. The Italian school headlines give differing totals.

    Footnotes[15][6][8][2]

Key actors

    Key Events

    1. contextAnalystBomb threat callers disrupt Ryanair flights across Europe

      Occurred on 3 November at Warsaw Chopin Airport: bomb threat callers disrupted Ryanair flights.

      Occurred on 3 November at Warsaw Chopin Airport: bomb threat callers disrupted Ryanair flights.

      Footnotes[14][17]
    2. contextAnalystUnidentified sender threatens 271 Italian schools with bombings

      Occurred on 4 November in Rome: an unidentified email sender threatened 271 Italian schools, with Gianni Rodari Elementary School named as the target.

      Occurred on 4 November in Rome: an unidentified email sender threatened 271 Italian schools, with Gianni Rodari Elementary School named as the target.

      Footnotes[15][18]

    Notable connections

    Evidenced relationships involving significant participants beyond the central cast.

    1. The Story covers the Event concerning threats to Ryanair flights. · reporting linkAnalystBomb threat callers disrupt Ryanair flights across Europe → Bomb threats disrupt flights across Europe

      The Event links to this flight-disruption Story.

      The Event links to this flight-disruption Story.

      Footnotes[14][3]
    2. The Story covers the school email threat and says the email impersonated Iran's Revolutionary Guard. · reporting linkAnalystUnidentified sender threatens 271 Italian schools with bombings → Rome school evacuated after spoof email to 271 Italian schools impersonates Iran's Revolutionary Guard

      The Event links to this Story; the impersonation detail does not identify the sender.

      The Event links to this Story; the impersonation detail does not identify the sender.

      Footnotes[15][8]
    3. The accepted connection groups this flight-disruption Story with broader Europe flight-and-ship coverage. · reporting linkAnalystBomb threats disrupt flights across Europe → Bomb threats disrupt flights and a ship across Europe

      The connection describes the Stories as coverage of the same flight-threat disruption.

      The connection describes the Stories as coverage of the same flight-threat disruption.

      Footnotes[21][3][1]
    4. The accepted connection groups the Rome school evacuation Story with broader Europe threat coverage. · reporting linkAnalystRome school evacuated after email bomb threat targets 271 Italian schools → Bomb threats disrupt flights and a ship across Europe

      The connection identifies the Stories as describing the same Italian school-threat episode.

      The connection identifies the Stories as describing the same Italian school-threat episode.

      Footnotes[19][6][1]
    How a Situation is put together19 Stories · 2 Events · 19 membership connections · 82 graph edges

    A retained time step

    This edition freezes the complete served membership and analysis available through its UTC cutoff. Later repairs or identity changes do not rewrite what this edition showed.

    Stories, Events, and cast

    Stories are reporting clusters. Events are coded occurrences within that reporting. The cast contains 38 canonical people and organizations linked to the retained evidence.

    Typed connections

    Story-to-Event edges identify supporting reporting. Entity-to-Event edges identify recorded actor or target participation. Mentions and analytical roles stay visibly distinct from recorded participation.

    Core, precursor, and continuation labels organize the reading. They do not by themselves establish causation. Collapsed graph groups and paginated evidence change presentation only; counts use the complete retained edition.