Andropov emails trigger bomb scares at 25 flights and TV stations

The clock is ticking email threats sent to broadcasters

Emails received by Nova TV and RTE on Friday contained specific warnings, stating, "We want the whole world to know about us, which is why one of our operatives has planted an explosive device in your building". The messages further warned that the device would detonate in 45 minutes, adding the phrase, "The clock is ticking".

These communications were signed by an individual named Mikhail Andropov, who claimed to be a leader of the group responsible for the recent airline hoaxes. The sender asserted that the events of the week were only a small part of what awaits Europe. Emails sent to the broadcasters claimed to originate from the same group behind the airline threats and included warnings of an imminent explosion.

Broadcasters resume operations after safety sweeps

Security services conducted thorough sweeps of targeted media outlets, discovering no explosive devices at any of the locations. In Dublin, RTE replaced its regular programming with music and recorded messages for periods lasting up to three hours.

Staff at the RTE campus returned to their desks once police completed a safety sweep of the buildings. Meanwhile, law enforcement evacuated the Nova newsroom in Sofia to conduct a search. Authorities later declared the site safe, allowing employees to return to work without any interruption to the station's broadcasting.

French airspace reports four additional aircraft alerts

The French Prime Minister’s office reported four additional bomb alerts involving aircraft over French airspace on Friday morning. The aircraft landed safely, and security services are currently carrying out inspections of the planes. An investigation is underway to identify the source of the alerts, which are affecting locations across Europe.

Irish Prime Minister Micheal Martin warns of societal disruption

Irish Prime Minister Micheal Martin stated that European security agencies have not determined whether the threats against media organizations and air travel are the work of individuals or part of a larger coordinated attack.

Speaking on RTE radio, Martin said the events demonstrate how easily society can be disrupted by unconventional activities intended to generate fear, anxiety, and instability. He encouraged the public to remain calm as the investigation continues.

Uncertainty over Russian connection to Mikhail Andropov

The name Mikhail Andropov, used to sign the emails, shares a surname with the former Soviet Communist Party General Secretary Yuri Andropov. The email subject line, "MESSAGE TO THE WEST," mirrors the title of a biography of the former leader.

It remains unclear whether these threats indicate direct Russian involvement or a deliberate attempt to frame Moscow. The emails also suggested that further disturbances in Europe are possible.

Previous flight hoaxes and cyberattack concerns

These threats against television stations followed a series of hoax bomb alerts that caused flight diversions and security checks in countries including Serbia and Spain. Similar incidents have disrupted passenger flights in countries such as Finland, leading to emergency landings and security sweeps.

These events occur during a period of heightened concern regarding cyberattacks, including those targeting supermarkets.

EU officials investigate potential links between incidents

EU officials stated on Friday, 6 November 2026, that it is too early to decide whether the various bomb-threat incidents are connected.