More than 6,000 schools receive bomb threats; hundreds evacuated

More than 6,000 Italian schools received anonymous email messages with bomb threats; hundreds of facilities were evacuated as authorities conduct checks and investigations into the origin of the messages. According to the Italianismo reporting, the content also included a threat directed at Prime Minister Giorgia Meloni.

Summary of the facts — bomb threats in Italian schools

• About 6,300 schools in Italy received emails claiming explosives had been placed in the facilities, according to Italianismo.
• At least 300 schools evacuated their premises; the total number of institutions that suspended classes was not officially confirmed by a centralized survey, per the report.
• Italian authorities classified the messages as threats requiring local inspections and safety checks, with no public indication of real explosives at this time.

Content and origin of the messages — threats and mention of Giorgia Meloni

• The email stated that explosives had been placed in the schools and included a threat directed at Prime Minister Giorgia Meloni, according to Italianismo.
• The message was signed by someone who self-identified as the leader of the group "Vilayat de Misoginistão"; the sender's identity and even the existence of such a group were not confirmed by authorities or independent outlets.
• Given the anonymous nature and variations of the text in similar emails, investigators treat the case as a potentially fabricated threat that required physical sweeps and technical checks.

Actions by Italian authorities — evacuation and national coordination

• Early government checks found no signs of concrete danger, according to reports cited by Italianismo, but prudence led to inspections at various schools and, in many cases, preventive evacuations.
• Prime Minister Giorgia Meloni convened a meeting at Palazzo Chigi with ministers, intelligence service representatives, and the National Cybersecurity Agency, as reported by Italianismo.
• Security forces — Carabinieri and Polizia — along with technical teams, conducted local inspections to rule out the presence of explosive devices and assess potential threats to school safety.
• For Brazilians interested in life in Italy or in processes such as citizenship, it is advisable to follow official guidance and local alerts about safety measures and possible school operations changes.

Investigations and international links — compromised email and threats in other countries

• The ANSA agency reported that the message was sent from a compromised email account tied to a server associated with Taiwan; however, according to ANSA, this did not allow a secure determination of the location or nationality of those responsible for the action.
• The same wave of emails with similar content was reported at schools in Ireland, Northern Ireland, and Scotland; authorities in those countries concluded the messages were false and coordinated local checks, according to international reports cited by ANSA.
• The use of compromised accounts and international routing is a common practice in email threat and extortion campaigns, leading investigative units to collaborate transnationally to trace the origin of the attacks.

Impact and context — school security and impressions for travelers and students

• The episode fits a recent pattern of threats and cyberattacks in Europe affecting public and private institutions, raising the level of attention to school safety and emergency procedures.
• Brazilians studying, with children enrolled, or planning travel to Italy should monitor local authorities and school updates; news portals and official Italian government channels typically publish guidance and statements in case of real risk.
• To follow developments on safety and government measures, consult the Italy News from Raízes Italianas and official communications from Italian security agencies.

What is known and what remains under investigation

• It is known that thousands of emails were sent and hundreds of schools adopted preventive measures; it is also known that the technical origin of the account used in the campaign involved a compromised address tied to resources associated with Taiwan, according to ANSA.
• The identity of the authors, any connection to real or fictional groups mentioned in the messages, and the possible motive behind the threats remain unconfirmed publicly. The investigation continues with cooperation among police forces, intelligence services, and international cybersecurity agencies.

Source: Italianismo