What happened on Monday morning

Just before 9am on Monday 19 October 2026, as pupils were arriving for the start of the school week, the same threatening email landed in the inboxes of schools right across Northern Ireland. It arrived outside the schools' normal secure communication channels, and it carried a generalised bomb threat: a claim that a series of planned attacks would be carried out that day.

The scale was far beyond anything of its kind seen before in the region. Northern Ireland's Education Minister, Paul Givan, said that by mid-morning about 160 schools had reported receiving the message; the Police Service of Northern Ireland (PSNI) later revised that figure upward, saying up to 300 schools had reported the same email. Similar threatening messages also reached a number of schools in Scotland, which Police Scotland confirmed it was treating as a hoax.

Head teachers faced the same choice at the same time: treat an almost certainly fake email as real, or gamble with the safety of children. Almost all of them chose caution. Some schools closed for the day; others evacuated pupils as a precaution, in several cases asking parents to collect their children immediately. Most schools, however, stayed open, and by mid-morning police in both Northern Ireland and Scotland were calling the threats non-viable.

The Northern Ireland school bomb threat hoax: how the response unfolded

The PSNI said the emailed message contained a generalised threat and originated from outside the United Kingdom. Officers carried out checks at affected sites; those checks, police said, had "not, at this time, resulted in anything untoward". Enquiries were described as urgent and ongoing, with police liaising directly with the affected schools. The force said it believed similar emails had been received by some schools elsewhere in the UK.

Assistant Chief Constable Ryan Henderson said: "We take incidents of this nature very seriously and we understand the concern in the community, not to mention the disruption it has caused in some school communities and for students and parents. Our enquiries are ongoing, however, at this stage we consider risk to the public as low."

Education Minister Givan condemned what he called an attempt to disrupt the education system, and described the language used in the emails — he said they contained religious and political claims, including a claim that Islamic law would be imposed, and were signed off with a religious phrase. He also said the emails referenced viable devices within school settings. It is important to be clear about what is verified here: Givan was describing the contents of the emails as reported to him. The identity or affiliation of whoever sent them has not been independently established, and police have not attributed the messages to any group.

In Scotland, Police Scotland said it was aware that threatening messages had been sent to a number of schools across the country and that these were being treated as a hoax. It is understood that some schools around Glasgow were evacuated on Monday morning; they have since reopened. The Scottish Government confirmed it had been informed about the hoax threats.

What police have ruled out — and what they have not

What is confirmed: a single coordinated wave of threatening emails reached hundreds of schools on one morning; the emails originated outside the UK; checks found nothing; police assess the risk to the public as low; and investigations by the PSNI and Police Scotland continue. What is not confirmed: who sent the messages, why Northern Ireland schools were targeted at this scale, or whether the Scottish messages came from the same sender.

The incident also exposed how a threat needs no physical reality to cause real disruption. Teaching time was lost across hundreds of schools. Parents were frightened. Police, the Education Authority and the Department of Education had to divert officers and staff into checking sites and managing communications — resources that could not be used elsewhere that morning. That is precisely why hoax threats are treated as serious criminal matters even when nothing is found: the disruption is the damage.

A pattern, but a new scale

Hoax communications aimed at schools are not new in Northern Ireland or Scotland — similar threats have circulated before, often triggering the same precautionary closures. What sets Monday's incident apart is the scale and the coordination: one morning, one message, hundreds of schools. The wording also appears to differ from earlier waves, though police have released only a generalised description of the email's contents.

Officials were careful not to overstate what they know. The PSNI called the message a generalised threat, not a specific one, and stressed that nothing had been found. In the hours after a mass threat, rumours about specific schools or suspects can spread faster than facts — and here the only official assessment is that the threat was not viable.

What schools and parents should take from this

For parents, the verified guidance is simple and comes from the authorities involved: follow your school's instructions and police updates, and do not spread unverified claims about which schools were targeted or who is responsible. Schools followed their internal emergency procedures on Monday, notified police and the Education Authority, and in most cases kept the school day running. That is the system working as designed: when the threat level is uncertain, procedure fills the gap.

For schools, the incident is a reminder that threat emails now arrive through ordinary channels, outside secure networks, at the busiest hour of the week. The PSNI's message to the public has been consistent: report, do not dismiss; let officers assess; and treat every message seriously until checks are complete — which is exactly what happened.

What our records show, and what they miss

Our live records track events such as today's verified incidents across the world, but a hoax of this kind sits at the edge of what any incident database captures: there is no location of an explosion, no casualty count, no damage to map. What we can record is the pattern — the recurring waves of hoax threats against schools in the UK, and how each wave's scale and method compares with the last.

What our records miss is the human cost that never appears in a counter: the anxiety of parents collecting children mid-morning, the lost teaching hours, the officers diverted from other work. The analyses in our archive repeatedly find the same gap — incidents that are "not viable" can still be highly disruptive, and that disruption deserves to be measured, not dismissed.

One data lesson: the first official figure was about 160 schools; it was later revised to up to 300. When sources disagree on a count, we lead with the lower verified number.

For context on how schools respond to genuine emergencies, see our report on the Oregon elementary school shooting, which sets out the official guidance behind run, hide, fight; and for another case where early reports shifted as officials verified them, our report on the Balochistan police trainee abduction.

The short version

  • On Monday 19 October 2026, up to 300 schools in Northern Ireland received the same emailed bomb threat; similar messages reached schools in Scotland.
  • The PSNI says the email contained a generalised threat, originated outside the UK, and is being treated as a hoax — checks found nothing and the risk to the public is assessed as low.
  • Some schools closed or evacuated as a precaution; most stayed open. Evacuated schools in Glasgow have since reopened.
  • Who sent the messages has not been established; police in Northern Ireland and Scotland have urgent investigations under way.
  • Hoax threats cause real disruption — lost teaching time, frightened parents, diverted police resources — even when nothing is found.