[REVISION HISTORY]

Bomb threats targeting Bulgarian public institutions

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-10-09 11:32 UTC → 2026-10-11 09:42 UTC · added ~~removed~~

Bulgaria has experienced a widespread wave of bomb threats targeting various public institutions, including schools, hospitals, courthouses, and government buildings. These threats, primarily delivered via email, triggered evacuations and security alerts in multiple cities such as Sofia, Burgas, Plovdiv, Varna, and Haskovo. In the Haskovo region, authorities reported 13 separate threats. Some messages included threats of knife attacks and were sent by an entity identifying as ‘Vilayat Miocynistan’, though officials have not confirmed if this represents a legitimate organization. Law enforcement conducted extensive searches, but no explosive devices were found, and most targeted institutions have since reopened. Recent reports indicate the scale of the campaign is significant, with hundreds of institutions targeted. Senior Commissioner Vladimir Dimitrov, Director of the Cybercrime Directorate at GDBOP, stated that these threats have been occurring in waves, “once or twice a week, for several months.” Targets have expanded to include airports and high-ranking officials, such as Interior Minister Ivan Demerdzhiev, who received a message threatening him with physical harm. Authorities believe the primary objective is to “create social chaos and destabilize the state,” particularly ahead of upcoming elections. Investigations show the emails are sent from compromised, hacked servers and computers located globally, complicating tracking efforts. Law enforcement is currently collaborating with international partners and private IT companies to determine the motives and origins of the attacks.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.