Bogotá investigates potential health agency hack over European airport bomb hoax email

A Bogotá health agency is at the center of a widening story about bomb hoax emails directed at a European airport, according to The Record from Recorded Future News. The report describes the Bogotá agency’s involvement as part of a broader chain of events surrounding the hoax messages, but it does not provide concrete details about any direct actions, outcomes, or specific connections between the emails and the Bogotá entity. No information is offered about the nature of the emails beyond their classification as hoaxes, nor about any injuries, arrests, or security responses tied specifically to the Bogotá agency.

BBC News expands the picture by reporting a coordinated wave of bomb-threat hoaxes targeting European air travel on 3 November 2026, with a multinational response across several countries. The BBC synthesis cites at least 21 flights affected in its cross-source aggregation, while CBS News notes at least 20 flights affected overall; in all cases, no explosives were found during subsequent checks. UK authorities are described as labeling the incidents malicious hoaxes and stressing that there was no verified danger to passengers or aircraft. The report also outlines a pattern of precautionary measures, diversions, and searches across multiple nations.

Poland’s incidents are detailed in BBC-sourced material as two inbound Warsaw-bound flights diverted under threat conditions. LOT Polish Airlines Flight LO286, a Boeing 737 MAX 8 from London Heathrow to Warsaw, diverted to Warsaw-Modlin and landed at 10:01 am local time; emergency services secured the perimeter and evacuated all 181 passengers and crew for screening. A separate Scandinavian Airlines flight from Copenhagen arrived at Warsaw-Chopin under emergency conditions, with passengers disembarking as police conducted investigations and airport operations continued. These specifics are corroborated by Mezha.net’s synthesis and Times of India reporting cited in cross-source summaries.

Spain’s Murcia-Corvera Airport is reported to have seen a Ryanair service from Manchester carrying 121 people (114 passengers and 7 crew) land safely around 10:30 am local time after a bomb threat. The airport operator coordinated a large-scale response that involved isolating the aircraft and relocating passengers to a secure area for individual screening, with involvement from Guardia Civil, National Police, airport fire services, medical teams, and TEDAX explosive-ordnance disposal units dispatched from Alicante, as captured in cross-source reporting aggregations. The Times of India and AirLive are among the outlets cited in these consolidated reports.

Italy is described as having protective airspace measures and on-ground searches connected to threats against Ryanair services bound for Rome Fiumicino. One Ryanair flight originating from Lisbon was escorted into Italian airspace by military fighters and landed under heavy security, with further movements indicating additional threats to Ryanair services. The cross-network material notes these actions as part of a broader Italian security posture amid the same threat wave reported by multiple outlets, including AirLive and corroborating sources.

Security Today frames the overall sequence as a coordinated wave of threats that triggered a broad security response across several countries, including fighter jets scrambles and extensive runway and terminal searches. The report characterizes the pattern as a multinational effort to mitigate perceived risk while ensuring passenger safety. France 24 is cited in Security Today as reporting that the threats affected at least 10 European airlines and led to the temporary closure of Warsaw’s airport, with no explosives found after checks.

South China Morning Post contributes to the wider narrative by noting that more than 20 flights were affected across multiple countries, with diversions, emergency landings, and coordinated security responses at several airports. Authorities described the threats as hoaxes and unusual in scale, and the SCMP report stresses that no bombs were found on the aircraft involved in the available material. The aggregate reporting also mentions Spain, Poland, and Italy as focal points within the cluster of incidents.

Nine.com.au covers the threat wave as extending across numerous European nations and describes the group calling itself the “Male State” as the source of the alleged bomb threats. It notes precautionary actions such as grounds stops, airspace checks, and on-ground security screenings as authorities treated the communications as malicious hoaxes, without naming specific airports or carriers in the initial material. BBC’s count of afflicted flights is echoed in their summary as part of the broader coverage.

The Irish Times adds context by reporting an Aer Lingus diversion from Dublin to Rome that landed in northern France after a bomb-threat incident. The Dublin–Rome flight, described as an Airbus with 151 passengers and six crew on board, was diverted and ultimately landed at an airbase in France. The Irish Times places this diversion within the wider cluster of European disruptions but does not specify direct connections to the other identified flights. The report also mentions Cork Airport’s involvement in the broader disruption, without providing further flight-specific details.

Security- and defense-linked outlets in the cross-network coverage, including El Constitutional, provide a consolidated view of the November 3 wave, naming a range of carriers—such as Iberia, Air Europa, Ryanair, LOT Polish Airlines, Wizz Air, and Finnair—as having activated enhanced security protocols. They describe air traffic across several countries continuing under intensified inspections, with some takeoffs suspended in the Madrid area as part of the precautionary measures. The reports confirm that the incidents were treated as threats with heightened security responses but without reporting confirmed explosives or direct casualties.