Dutch military police disclosed Saturday that a man detained over a threat to a Prague-bound flight at Amsterdam’s Schiphol Airport had been released, leaving unresolved whether that incident was connected to the wave of hoaxes affecting European aviation. The aircraft continued to Prague on Thursday evening, a police spokesperson told the Associated Press. The man was released Friday; no connection to the wider threats was established.

The update on Nov. 7 underscored the distinction between investigating individual incidents and identifying a coordinated campaign. Dozens of flights had received threats during the week, but searches found no suspicious items and no injuries were reported. European air-traffic authorities described the overall disruption as limited, even as individual passengers experienced diversions and interrupted journeys.

Security Responses Varied by Flight

Official records show why the response cannot be reduced to a single airport or airline. Hungary’s defense ministry reported that its Gripen fighters received successive NATO alerts Friday concerning three passenger aircraft. The first involved an Airbus A321 flying from Brussels to Sofia. The fighters began escorting it near Kaposvár before it left Hungarian airspace toward Serbia.

A later alert concerned two aircraft departing Prague, one bound for Cyprus and the other for Bucharest. The ministry said they left Hungarian airspace toward Romania at about 10:45 a.m., after which NATO ordered patrols near the Hungarian-Romanian border. The account documents the military response, rather than establishing the credibility or origin of the threats.

These different outcomes matter for travelers reading reports of fighter escorts. An escort, diversion or precautionary search describes a response to information received. It does not establish that an explosive device was aboard, and the Hungarian statement did not identify a perpetrator.

Attribution Remains an Open Question

Reuters reported Friday that threats had also reached broadcasters in Ireland and Bulgaria. It could not establish the sender’s identity, the emails’ origin or whether they came from the source responsible for any airline threats. An Italian airport source said a Prague–Rome flight diverted to Venice, while direct disruption was lower than on Thursday.

Saturday’s police disclosure did not resolve those wider questions. Authorities had not attributed the airline threats to a government or organization. That leaves a basic evidentiary limit: a series of similar disruptions can warrant coordinated investigation without proving common authorship.

For passengers, the distinction is practical as well as factual. Reports about an earlier threat do not describe the current status of every flight in Europe. Travelers need information about their own operating carrier, departure airport and onward journey, while investigations address the separate question of responsibility.

Assistance and Compensation Are Separate

The European Commission’s passenger guidance distinguishes help with a disrupted journey from additional financial compensation. For a covered cancellation, passengers generally have a choice between reimbursement and rerouting, together with applicable assistance. Security risks can qualify as extraordinary circumstances affecting whether compensation is payable.

Coverage also depends on the itinerary and carrier. The guidance covers flights departing the European Union, including those operated by non-EU airlines, and flights arriving from outside the EU when operated by an EU airline. An American traveler’s nationality therefore does not, by itself, determine eligibility. The direction of travel and operating airline matter.

Passengers should contact the airline before making replacement arrangements and retain necessary, reasonable expense receipts. The Commission advises complaining to the airline first if rights have not been respected. A security-related interruption should not be assumed either to guarantee a payment or to eliminate every obligation to help passengers continue their journeys.

Each Disrupted Journey Needs Its Own Record

The Commission’s interpretative guidelines explain why a broad reference to extraordinary circumstances is insufficient on its own. A carrier relying on that defense must demonstrate a connection between the event and the cancellation or delay, as well as show that reasonable measures could not have avoided the disruption. The assessment concerns the particular flight and circumstances.

Those guidelines identify incident reports, logbook extracts and external statements as potential evidence. That framework makes the airline’s explanation important: a passenger needs to understand what happened to the booked service, rather than relying solely on headlines about a continent-wide wave of threats. It also allows individual claims to be assessed without deciding who ultimately sent a hoax.

The same guidance recognizes limits on what an airline can reasonably do. Carriers must deploy appropriate staff, equipment and financial resources to avoid disruption, but are not required to make sacrifices intolerable in light of their capacity at the time. That qualification helps explain why recovery options may differ between flights, even when the initial cause appears similar. It is another reason to preserve the carrier’s written account.

The unresolved investigations and differing flight responses make precise operational information essential. Passengers seeking assistance need the record of their own journey, including the airline’s explanation, the alternatives offered and the costs incurred.