Significance
2 measured / 2 eligible · 0 missing · 0 not applicable
score (0 to 1) · Event-level distribution, not a Situation risk score.
across all 2 events
On 3 November 2026, bomb threat callers disrupted Ryanair flights at Warsaw Chopin Airport, in the Event “Bomb threat callers disrupt Ryanair flights across Europe”; “Bomb threats disrupt flights across Europe” is dated 4 November. Stories dated 4 November describe wider flight and ship disruptions, including “Bomb threats disrupt flights and a ship across Europe” and “False bomb threats target a dozen European flights and a cruise ship.” A separate Event dated 4 November names an unidentified email sender threatening 271 Italian schools and Gianni Rodari Elementary School as its target; “Rome school evacuated after spoof email to 271 Italian schools impersonates Iran's Revolutionary Guard” describes the email as impersonating the group, not as sent by it. “Rome school evacuated after email bomb threat targets 271 Italian schools” reports an evacuation, while “False bomb threats target 280 Italian schools and two Rome-bound planes” gives a different school total. Other headlines extend the reported targets to Bulgarian aircraft and courthouses, while “Putin accused of bomb threats grounding flights and cyberattacks disrupting European fridges” presents an accusation rather than an established attribution.
Footnotes[14][17][3][1][5][18][8][15][6][2][11][4]The two coded Events describe distinct incidents: callers and Ryanair flights in Warsaw, and an unidentified email sender and a Rome school. Accepted links group several flight reports and the Italian school reports with broader coverage, but do not establish a common sender or coordination across the incidents. The headlines differ in stated scale: one describes seven passenger planes, another a dozen flights and a cruise ship; the school headlines give totals of 271 and 280. Ryanair is a mention in the linked Stories, not a canonical Event participant, and the Putin headline does not establish responsibility.
Footnotes[14][15][21][19][20][7][5][8][2][16][4]Explanation originally captured 2026-11-05 · Evidence through 2026-11-05 UTC · Source edition sed_a6749962244e3fc87d7ea8ace59e0b55
A 2-day Situation represented by 2 coded Events carried across 19 member Stories.
The coded activity is led by CR01 · Homicide or Violent Crime (1) and CR10 · Police Investigation or Operation (1).
🇮🇹Italy and 🇵🇱Poland are prominent in the retained actor and relationship evidence.
38 canonical Entities are linked to this edition.
Metric coverage. 2 coded Events · 2 CAMEO+ · 0 conflict. The four dimensions describe the CAMEO+ subset; conflict Events do not carry these scores.
Dot = mean · shaded span = observed range · position uses each metric’s defined scale.
How the coder scored the full retained Event set
2 coded events — 2 CAMEO+
No conflict-family event here, so nothing carries a fatality count — a missing column, not a toll of zero. 2 sit outside POLITICAL, where Goldstein and quad class are undefined.
2 measured / 2 eligible · 0 missing · 0 not applicable
score (0 to 1) · Event-level distribution, not a Situation risk score.
across all 2 events
2 measured / 2 eligible · 0 missing · 0 not applicable
score (0 to 10) · Event-level distribution, not a Situation risk score.
across all 2 events — every one of them CAMEO+
2 measured / 2 eligible · 0 missing · 0 not applicable
score (0 to 1) · Event-level distribution, not a Situation risk score.
across all 2 events — every one of them CAMEO+
2 measured / 2 eligible · 0 missing · 0 not applicable
score (0 to 1) · Event-level distribution, not a Situation risk score.
across all 2 events — every one of them CAMEO+
2 measured / 2 eligible · 0 missing · 0 not applicable
score (0 to 1) · Event-level distribution, not a Situation risk score.
across all 2 events — every one of them CAMEO+
2 measured / 2 eligible · 0 missing · 0 not applicable
score (0 to 1) · Event-level distribution, not a Situation risk score.
across all 2 events
This retained edition, independent of graph and page limits. Different dimensions, not a blended risk score; reported tolls may overlap.
2026-11-04analystlatest
Rome school-threat Event and dated coverage of flight and school incidents
The Rome school-threat Event is dated 4 November, and the Stories dated that day describe flight and ship threats, aircraft inspections and diversions, the Rome evacuation, the Italian school email, and other reported targets.
What kind of event · 2 coded types
over 2 coded events on this edition
Countries · who is acting
Selected from the complete retained edition
The Warsaw/Ryanair Event anchors the flight strand; dated Stories also describe aircraft diversions, inspections and threats involving a ship. The Bulgaria and Putin headlines broaden the reported scope but do not establish a shared perpetrator.
The 4 November Event identifies an unidentified email sender and Gianni Rodari Elementary School; related Stories describe a Rome evacuation and an email impersonating Iran's Revolutionary Guard. The Italian school headlines give differing totals.


Occurred on 4 November in Rome: an unidentified email sender threatened 271 Italian schools, with Gianni Rodari Elementary School named as the target.
Evidenced relationships involving significant participants beyond the central cast.
The Event links to this flight-disruption Story.
The Event links to this Story; the impersonation detail does not identify the sender.
The connection describes the Stories as coverage of the same flight-threat disruption.
The connection identifies the Stories as describing the same Italian school-threat episode.
This edition freezes the complete served membership and analysis available through its UTC cutoff. Later repairs or identity changes do not rewrite what this edition showed.
Stories are reporting clusters. Events are coded occurrences within that reporting. The cast contains 38 canonical people and organizations linked to the retained evidence.
Story-to-Event edges identify supporting reporting. Entity-to-Event edges identify recorded actor or target participation. Mentions and analytical roles stay visibly distinct from recorded participation.
Core, precursor, and continuation labels organize the reading. They do not by themselves establish causation. Collapsed graph groups and paginated evidence change presentation only; counts use the complete retained edition.