How has the hoax bomb threat landscape changed in India?
Hoax bomb threats have remained a recurring issue across India, with aviation and education emerging as the most exposed sectors. The report identifies a particularly significant increase in aviation threats during 2024, while educational institutions recorded a steady rise through 2025 and into February 2026. Courts and government facilities have also experienced a general increase in reported incidents since 2023.
Threat volumes can vary considerably. In major cities such as Bengaluru and Delhi, the report notes that incidents can range from approximately 30–50 threats during a surge period to one to five threats on a given day. Incidents may occur individually or form part of larger citywide or nationwide waves.
Which sectors and locations are most exposed to hoax bomb threats?
Aviation and educational institutions remain the primary targets identified in the report. For airlines, reported threats increased from 71 in 2023 to 728 in 2024, before 61 threats were recorded up to July 2025. Delhi, Mumbai and Bengaluru airports recorded the greatest number of reported aviation threats during the period examined.
Educational institutions also experienced a substantial increase, from 76 reported threats in 2023 to 360 in 2024 and 380 in 2025. Delhi and Bengaluru emerged as prominent locations, while incidents were also reported across Haryana, Maharashtra, Gujarat, Tamil Nadu, Karnataka, Punjab and other states.
The report also identifies threats affecting courts, government facilities, malls and corporate offices. Delhi recorded 233 non-airline threats during 2025, while Bengaluru recorded 54 and Ahmedabad 20 during the same period.
How are hoax bomb threats typically communicated?
Digital channels are the most frequently used method identified in the report. Emails are classified as a high-frequency method because they allow anonymity and mass targeting. Social media platforms such as X and Telegram are classified as a medium-frequency method and may be used to amplify threats or tag officials.
Anonymous phone calls and Voice over Internet Protocol (VoIP) communications are classified as low-frequency methods, while SMS and written threats are considered very low-frequency. The use of VPNs, encrypted servers, disposable accounts and spoofed communications can make attribution and investigation more difficult.
What are the main business continuity risks?
The operational consequences can be significant even when a threat is ultimately determined to be false. In aviation, threats can activate security protocols involving flight diversions, evacuations, inspections and bomb-disposal teams. The report notes that airlines have faced financial losses, delays, cancellations and reputational damage as a result.
For educational institutions, repeated threats can disrupt examinations and academic schedules while increasing anxiety among students and parents. Businesses may similarly face temporary evacuation, loss of access to facilities, deployment of emergency resources and interruption of critical operations.
The report also highlights resource drain, psychological impact, legal and enforcement challenges and potential vulnerability of critical infrastructure as broader risks.
How should organisations respond to a hoax bomb threat?
The report recommends establishing a Crisis Management Committee and clearly assigning responsibilities to employees, security teams and senior management before an incident occurs. Organisations should identify primary and secondary evacuation routes, establish assembly points approximately 100–200 metres from buildings and conduct regular drills.
When a threat is received, employees should immediately report it to the designated security officer and preserve the original evidence. Security teams should notify local police, bomb-disposal teams and the corporate crisis team. Employees should evacuate through designated routes, while security personnel should manage crowd control and prevent re-entry.
After authorities provide clearance, organisations should verify critical assets, conduct a post-incident review, provide appropriate support to affected employees and gradually resume operations. The report also recommends documented procedures covering detection, evacuation, communication and recovery, alongside surveillance, access controls, redundant communications, encrypted backups and employee training.
Frequently asked questions
Which sectors face the most hoax bomb threats in India?
Aviation and educational institutions are the most exposed sectors identified in the report. Courts, government facilities, malls and corporate offices have also recorded reported incidents.
What is the most common method used for hoax bomb threats?
Email is identified as the most frequent method, followed by social media platforms. VoIP calls are less frequent, while SMS and written threats are classified as very low-frequency methods.
Does India have an official business SOP for bomb threats?
The report states that there are currently no official Government of India-specific SOPs for businesses dealing with bomb threats. It therefore recommends that organisations adopt structured internal procedures covering preparedness, evacuation, communication, emergency response and recovery.
Download the full report now
The MitKat Special Report: Hoax Bomb Threat Landscape of India provides detailed sectoral statistics, geographical distribution, threat methods, case studies, response procedures and business recommendations. Download the full report now to brief security, risk and business continuity teams.
Filed under: India-South AsiaThreat Intelligence Special Reports
