Italian authorities evacuated more than 300 schools on Wednesday after receiving identical bomb threat emails, part of a broader wave of hoax threats affecting European institutions. Police and education officials confirmed the evacuations were precautionary, with no explosives or credible threats detected during subsequent searches.
The threats, sent to schools in multiple Italian regions including Rome, Turin, and Basilicata, were signed by a sender identifying as ‘Mikhail Andropov, leader of the Vilayat of Misoginistan.’ The emails claimed a ‘powerful explosive device with a remote detonator’ had been placed inside school buildings and also threatened Italian Prime Minister Giorgia Meloni, stating a bomb had been planted in the engine of her car. Authorities described the threats as hoaxes, emphasizing there was no indication of concrete danger to schools or public safety.
Investigations are ongoing, with Italian Education Minister Giuseppe Valditara stating the number of affected schools could rise. Police in Rome, Scotland, and Northern Ireland confirmed similar threats were received in their regions, though authorities in all locations treated the alerts as non-credible. The Police Service of Northern Ireland and Police Scotland reported no evidence of a genuine risk, while schools in Ireland and Bulgaria also received comparable emails targeting newsrooms and broadcasters.
Evacuations and Immediate Response
Evacuations began just before 10 a.m. local time in Italy, disrupting classes and prompting security sweeps at school premises. At Rome’s Mamiani high school, students initially mistook the alarm for a routine recess bell before learning of the bomb threat. An 18-year-old student described the email as ‘pretty violent,’ warning of mass casualties. Authorities confirmed all students and staff were safely evacuated and supervised during the searches.
Italian Premier Giorgia Meloni stated the threats appeared designed to ‘generate alarm and concern,’ while Defense Minister Guido Crosetto characterized the incidents as part of a broader strategy to ‘unleash terror’ through easily replicable hoaxes. He noted that such threats could be initiated by ‘mythomaniacs, madmen, or hostile forces,’ emphasizing the vulnerability of public institutions to low-cost intimidation tactics.
Broader European Disruptions
The bomb threats follow a series of cyberattacks and hoax alerts across Europe in recent weeks, targeting airlines, blood banks, supermarkets, and television broadcasters. Authorities in Italy, the UK, and Ireland have grouped these incidents under the umbrella of ‘hybrid threats,’ which combine digital and psychological warfare to destabilize societies. Italian Foreign Minister Antonio Tajani previously linked a leak of his personal data to the dark web to pro-Russian hackers, though no direct evidence has been publicly attributed to state actors in the bomb threats.
The same sender signature—‘Mikhail Andropov’—has appeared in threats against flights, newsrooms in Ireland and Bulgaria, and now schools across multiple countries. The consistency of the messaging has raised questions about the perpetrator’s motives, though no group or individual has claimed responsibility. Investigators are examining whether the threats are the work of lone actors, organized groups, or state-sponsored entities, with no definitive conclusions yet.
Government and Public Reaction
Italian officials have framed the threats as attempts to sow fear rather than actual security risks. Meloni’s government convened an emergency meeting of ministers to address the escalating disruptions, while education authorities coordinated with local police to manage evacuations and reassure the public. Valditara stated the government was ‘monitoring the situation closely’ and would provide updates as investigations progressed.
Public reaction has been mixed, with some parents and students expressing frustration over repeated evacuations. At the Matteotti Pellico institute in Turin, a police officer stood guard as students were led to safety, underscoring the heightened security presence. Meanwhile, experts warn that the psychological impact of such hoaxes may linger, even as authorities emphasize their non-credibility.
Investigative Challenges
The use of the pseudonym ‘Mikhail Andropov’—a name referencing a historical Soviet figure—has fueled speculation about potential state involvement, though no evidence has linked the threats to any government. Investigators are analyzing digital footprints, email headers, and linguistic patterns to trace the origin of the messages. The lack of a clear motive or demand has further complicated the probe, as traditional ransom or political statements are absent from the threats.
Authorities have not ruled out the possibility that the threats are the work of domestic actors seeking to destabilize public order or international groups testing Europe’s resilience to hybrid warfare. The European Union’s cybersecurity agency has been consulted, and discussions are underway about strengthening protections for critical infrastructure against similar attacks.
What’s Next?
As of the latest updates, no arrests have been made, and the investigation remains active. Italian authorities have urged the public to remain vigilant but cautioned against overreacting to hoaxes. Schools are expected to resume normal operations once safety checks are completed, though some institutions may implement additional security protocols in the coming days.
The broader question of how to counter such low-cost, high-impact threats remains unresolved, with officials acknowledging the difficulty of preventing future incidents. For now, the focus remains on identifying the source of the threats and mitigating their psychological and operational impact on European societies.