Coordinated hoax bomb-threat emails, apparently sent from outside the UK, targeted more than 300 schools across Northern Ireland and also affected schools in Scotland and the Republic of Ireland; police assess no credible threat but continue investigations.

Terrorism & Criminal Proxy TacticsTerrorismBomb threats, assassination plots, targeted killings

Aggressor

Summary

Police in Northern Ireland are treating a wave of threatening bomb-related emails sent to more than 300 schools as a hoax. The Police Service of Northern Ireland (PSNI) said that over 300 schools had reported receiving the same threatening email message. The Department of Education advised that schools should remain open unless otherwise instructed by PSNI. The Education Authority (EA) stated the message had similarities to a hoax threat email sent the previous month which had also been treated as a hoax by PSNI.

PSNI indicated that the threatening email appeared to originate from outside the United Kingdom. Assistant Chief Constable Anthony McNally said police were taking the incidents very seriously, understood the concern for communities, and that enquiries were ongoing. At this stage police had not been made aware of any evidence of an actual, credible threat to schools and therefore considered the risk to the public to be low, but would continue to liaise with affected schools.

Victoria Primary School in Newtownards, County Down, evacuated pupils in the morning after receiving the email but reopened about an hour later following Department of Education guidance; some pupils went home but others remained. The article notes that in October a number of schools closed after an email threatened that an explosive device was located within hundreds of schools in Northern Ireland. Police Scotland reported that threatening messages were also sent to a number of schools in Scotland and across the wider UK; those messages were immediately assessed as hoaxes and investigated as threats to be treated as hoax communications.

The article states that An Garda Siochana (Irish police) were aware of a "generic communication" linked to a number of educational establishments in the Republic of Ireland and assessed the threat as not credible, advising no school closures. In a social media post, Alliance Assembly member Paula Bradshaw condemned the "reckless bomb threats" sent to schools, calling such actions unacceptable and urging parents and staff to remain calm and follow official guidance. Sinn Fein MLA Pat Sheehan said the latest reports of sinister threats were completely unacceptable and had again left school communities in fear and disruption; he urged vigilance and reporting of any suspicious activity to PSNI and said parents, carers and children would receive further engagement with police.

Related BBC links shown on the page include articles titled "Schools 'explosive device' email a hoax, say police" and "Schools across Scotland targeted by fresh hoax bomb threats", indicating a broader pattern of coordinated hoax bomb-threat emails targeting schools across different UK regions and into Ireland.

Classification

Confidence: High

The primary subject is a coordinated campaign of threatening emails implying explosive devices at schools across multiple jurisdictions. Though assessed as hoaxes, these constitute deliberate intimidation using the threat of terrorism. The activity aligns with Terrorism & Criminal Proxy Tactics, specifically bomb threats, and uses cyberspace as the delivery vector. Police statements and responses are secondary to the reporting of the threat activity itself, and the cross-regional pattern sugg...

Source URL

https://bbc.com/news/articles/cq0mdnrxe9k3o

Open source

Provenance

Publisher: extension
Submitted: Nov 11, 2026, 13:29 UTC
Last updated: Nov 11, 2026, 17:43 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "2178cc73-32d9-4175-991e-ee089ddd8029",
  "url": "https://bbc.com/news/articles/cq0mdnrxe9k3o",
  "source": "extension",
  "status": "processed",
  "category": "Terrorism & Criminal Proxy Tactics",
  "subcategory": "Terrorism",
  "incident_type": "Bomb threats, assassination plots, targeted killings",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "1",
  "tags": [
    "hoax bomb threats",
    "school security",
    "email threats",
    "cross-border coordination",
    "Northern Ireland",
    "Scotland",
    "Republic of Ireland",
    "public safety messaging",
    "origin outside UK"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": null,
  "description": "Police in Northern Ireland are treating a wave of threatening bomb-related emails sent to more than 300 schools as a hoax. The Police Service of Northern Ireland (PSNI) said that over 300 schools had reported receiving the same threatening email message. The Department of Education advised that schools should remain open unless otherwise instructed by PSNI. The Education Authority (EA) stated the message had similarities to a hoax threat email sent the previous month which had also been treated as a hoax by PSNI.\n\nPSNI indicated that the threatening email appeared to originate from outside the United Kingdom. Assistant Chief Constable Anthony McNally said police were taking the incidents very seriously, understood the concern for communities, and that enquiries were ongoing. At this stage police had not been made aware of any evidence of an actual, credible threat to schools and therefore considered the risk to the public to be low, but would continue to liaise with affected schools.\n\nVictoria Primary School in Newtownards, County Down, evacuated pupils in the morning after receiving the email but reopened about an hour later following Department of Education guidance; some pupils went home but others remained. The article notes that in October a number of schools closed after an email threatened that an explosive device was located within hundreds of schools in Northern Ireland. Police Scotland reported that threatening messages were also sent to a number of schools in Scotland and across the wider UK; those messages were immediately assessed as hoaxes and investigated as threats to be treated as hoax communications.\n\nThe article states that An Garda Siochana (Irish police) were aware of a \"generic communication\" linked to a number of educational establishments in the Republic of Ireland and assessed the threat as not credible, advising no school closures. In a social media post, Alliance Assembly member Paula Bradshaw condemned the \"reckless bomb threats\" sent to schools, calling such actions unacceptable and urging parents and staff to remain calm and follow official guidance. Sinn Fein MLA Pat Sheehan said the latest reports of sinister threats were completely unacceptable and had again left school communities in fear and disruption; he urged vigilance and reporting of any suspicious activity to PSNI and said parents, carers and children would receive further engagement with police.\n\nRelated BBC links shown on the page include articles titled \"Schools 'explosive device' email a hoax, say police\" and \"Schools across Scotland targeted by fresh hoax bomb threats\", indicating a broader pattern of coordinated hoax bomb-threat emails targeting schools across different UK regions and into Ireland.",
  "summary_short": "Coordinated hoax bomb-threat emails, apparently sent from outside the UK, targeted more than 300 schools across Northern Ireland and also affected schools in Scotland and the Republic of Ireland; police assess no credible threat but continue investigations.",
  "summary_extended": null,
  "actor_primary": "Police Service of Northern Ireland (PSNI)",
  "target_primary": null,
  "location_text": "Schools across Northern Ireland",
  "location_region": null,
  "location_coordinates_lat": 55.378051,
  "location_coordinates_lon": -3.435973,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The primary subject is a coordinated campaign of threatening emails implying explosive devices at schools across multiple jurisdictions. Though assessed as hoaxes, these constitute deliberate intimidation using the threat of terrorism. The activity aligns with Terrorism & Criminal Proxy Tactics, specifically bomb threats, and uses cyberspace as the delivery vector. Police statements and responses are secondary to the reporting of the threat activity itself, and the cross-regional pattern sugg...",
  "event_time_utc": null,
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-11-11T13:29:00.141Z",
  "updated_at": "2026-11-11T17:43:22.420Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: UnknownLocation: Regional

Source reliability

Info credibility

Event time

Date unknown

Event time confidence

unknown

Location

Schools across Northern Ireland

Primary actor

Police Service of Northern Ireland (PSNI)

Country

United Kingdom

Tags

hoax bomb threats, school security, email threats, cross-border coordination, Northern Ireland, Scotland, Republic of Ireland, public safety messaging, origin outside UK

Loading signal...

{ "id": "2178cc73-32d9-4175-991e-ee089ddd8029", "url": "https://bbc.com/news/articles/cq0mdnrxe9k3o", "source": "extension", "status": "processed", "category": "Terrorism & Criminal Proxy Tactics", "subcategory": "Terrorism", "incident_type": "Bomb threats, assassination plots, targeted killings", "country": "United Kingdom", "source_reliability": "B", "info_credibility": "1", "tags": [ "hoax bomb threats", "school security", "email threats", "cross-border coordination", "Northern Ireland", "Scotland", "Republic of Ireland", "public safety messaging", "origin outside UK" ], "nodes": [], "countries": [], "where_text": "Cyberspace", "headline": null, "description": "Police in Northern Ireland are treating a wave of threatening bomb-related emails sent to more than 300 schools as a hoax. The Police Service of Northern Ireland (PSNI) said that over 300 schools had reported receiving the same threatening email message. The Department of Education advised that schools should remain open unless otherwise instructed by PSNI. The Education Authority (EA) stated the message had similarities to a hoax threat email sent the previous month which had also been treated as a hoax by PSNI.\n\nPSNI indicated that the threatening email appeared to originate from outside the United Kingdom. Assistant Chief Constable Anthony McNally said police were taking the incidents very seriously, understood the concern for communities, and that enquiries were ongoing. At this stage police had not been made aware of any evidence of an actual, credible threat to schools and therefore considered the risk to the public to be low, but would continue to liaise with affected schools.\n\nVictoria Primary School in Newtownards, County Down, evacuated pupils in the morning after receiving the email but reopened about an hour later following Department of Education guidance; some pupils went home but others remained. The article notes that in October a number of schools closed after an email threatened that an explosive device was located within hundreds of schools in Northern Ireland. Police Scotland reported that threatening messages were also sent to a number of schools in Scotland and across the wider UK; those messages were immediately assessed as hoaxes and investigated as threats to be treated as hoax communications.\n\nThe article states that An Garda Siochana (Irish police) were aware of a \"generic communication\" linked to a number of educational establishments in the Republic of Ireland and assessed the threat as not credible, advising no school closures. In a social media post, Alliance Assembly member Paula Bradshaw condemned the \"reckless bomb threats\" sent to schools, calling such actions unacceptable and urging parents and staff to remain calm and follow official guidance. Sinn Fein MLA Pat Sheehan said the latest reports of sinister threats were completely unacceptable and had again left school communities in fear and disruption; he urged vigilance and reporting of any suspicious activity to PSNI and said parents, carers and children would receive further engagement with police.\n\nRelated BBC links shown on the page include articles titled \"Schools 'explosive device' email a hoax, say police\" and \"Schools across Scotland targeted by fresh hoax bomb threats\", indicating a broader pattern of coordinated hoax bomb-threat emails targeting schools across different UK regions and into Ireland.", "summary_short": "Coordinated hoax bomb-threat emails, apparently sent from outside the UK, targeted more than 300 schools across Northern Ireland and also affected schools in Scotland and the Republic of Ireland; police assess no credible threat but continue investigations.", "summary_extended": null, "actor_primary": "Police Service of Northern Ireland (PSNI)", "target_primary": null, "location_text": "Schools across Northern Ireland", "location_region": null, "location_coordinates_lat": 55.378051, "location_coordinates_lon": -3.435973, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The primary subject is a coordinated campaign of threatening emails implying explosive devices at schools across multiple jurisdictions. Though assessed as hoaxes, these constitute deliberate intimidation using the threat of terrorism. The activity aligns with Terrorism & Criminal Proxy Tactics, specifically bomb threats, and uses cyberspace as the delivery vector. Police statements and responses are secondary to the reporting of the threat activity itself, and the cross-regional pattern sugg...", "event_time_utc": null, "end_time_utc": null, "event_time_confidence": "unknown", "created_at": "2026-11-11T13:29:00.141Z", "updated_at": "2026-11-11T17:43:22.420Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "unknown", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }