Italian Prime Minister Giorgia Meloni said on the government website on 11 November 2026 that thousands of Italian schools received bomb-threat messages that day, some evacuated, and police checks found no explosive in any school [2]. The Italian education ministry said about 6,000 schools received the emails; Italian media said the sender details involved an alumni mailbox at Taiwan's Da-Yeh University, the university said the account showed heavy sending, was likely stolen or abused, and has been disabled pending investigation, and Italian police and security experts said the sending domain alone does not show the sender is in Taiwan [1][3]. Schools and families who receive similar threats should wait for police to verify each alert and should not let an anonymous email set the school calendar; organisations should not treat the sending domain alone as proof of the sender's location [2][3].
Bomb-threat emails hit 6,000 Italian schools; sender traced to a Da-Yeh University alumni mailbox, which the school has disabled
2 min read
- Disclosed
- Nov 11, 2026
- Occurred
- Nov 11, 2026
- Published
- Nov 13, 2026
- Last updated
- Nov 13, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
Timeline
Technical details
What happened
A mass email threat campaign hit Italy on 11 November; ANSA reported the messages were sent before 10:00 local time and claimed remotely detonated explosives had been placed in school buildings [1]. Prime Minister Giorgia Meloni said in a video on the government website that police checks found no explosive in any school, there is no evidence of a concrete danger, and the messages were meant to create fear and chaos [2].
Scope
The Italian education ministry said about 6,000 schools received the emails, and some evacuated before classes resumed after police checks [1]. Italian media said the sender details involved a Da-Yeh University alumni mailbox in Taiwan; the university said an alumnus account showed heavy sending, was likely stolen or abused, has been disabled, and the cause and actual sender are not yet confirmed [3]. Italian police and security experts said the sending domain alone does not show the sender is in Taiwan, and server abuse or spoofing cannot be ruled out [1][3].
Response
Meloni said every alert will continue to be checked one by one, and an anonymous email will not be allowed to set the school calendar [2]. Taiwan's representative office in Italy condemned the threats and said Taiwanese agencies are willing to cooperate and provide technical support [1].
Remediation
Vendor guidance
- 1
Schools and families who receive similar threat emails should wait for police to verify each alert and should not let an anonymous message set the school calendar; the sending domain alone does not show where the sender is.
References
Official / primary1
- [2]Presidenza del Consiglio dei Ministri2026-11-11Accessed 2026-11-13Snapshot 2026-11-13 sha256 42762f01f30c
“non è stato trovato nulla in nessuna scuola.”
Media2
- [1]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.