Sourced fact
The News
Local authorities in Italy, Scotland, and Northern Ireland have announced that they received approximately 6,300 school threats in Italy and over 700 school threats in the two United Kingdom nations involving kidnapping or bombing, prompting many to evacuate their buildings as a precaution. Reports indicate that these cyberattacks appear linked to a pre-planned strategy aimed at causing panic and anxiety without any evidence of tangible danger.
Italian Prime Minister Giorgia Meloni stated via Facebook that the incoming reports seem to be part of a plan designed to instill terror, while Italian Education Minister Giuseppe Valditara confirmed that the incident was likely a cyberattack rather than a real threat. The Italian official added that there is a clear strategy behind this series of threats, which also targeted airplanes, airlines, airports, and other locations across Europe.
In Scotland, Education Secretary Mairi Gougeon clarified that there is no risk to the public and that cybercrime officers are working to identify the source of the messages. In Northern Ireland, education officials advised schools to remain open unless police issued further instructions, confirming that warnings were immediately assessed as false claims.
Sources report on a message sent via email in the name of "Michael Andropov," leader of the "Mizoghenstan" region, which caused confusion in many schools despite an extremist group with offensive leanings denying any connection to the false warnings. One school principal in Milan, Massimo Nonzio Barilla, noted that the message seemed like comedy or a letter from Mars, leading him not to evacuate his school and to reassure parents who contacted him.
Italian reports also indicate that approximately 280 school principals received threats in recent days, while Umbria Region President Stefania Proietti confirmed that inspections conducted in schools in the region yielded negative results and that law enforcement agencies are working quickly and attentively to verify every report.
Analysis & context
Analysis & Context
From an analytical perspective, this incident points to an escalation of cyberattacks targeting critical infrastructure in Europe, where the threat is no longer limited to traditional crimes but has extended to disrupting educational, healthcare, and transportation services through fake email messages.
In a broader context, these events reflect the increasing use of non-state actors or extremist groups to exploit digital communication channels to spread fear without the need to carry out actual physical attacks, placing a heavy burden on emergency systems and schools in dealing with such false threats.
Furthermore, the reactions of officials in different countries highlight disparities in strategies between nations that prefer immediate evacuation as a strict precautionary measure and others that rely on rapid assessment of cyber content before taking any action, reflecting the challenges of cross-border security coordination in countering digital threats.
Finally, classifying this incident as a "cyberattack" by Italian officials confirms a shift in the nature of national security to include protecting the digital space from attacks that may be driven by political or social agendas aimed at undermining general stability without committing direct acts of violence.
