At least four such threats rattled Nagpur’s judiciary since December 2025, and 16 schools faced a coordinated email attack in August 2026. Nagpur: Repeated bomb-threat emails targeting courts and educational institutions have exposed serious gaps in Maharashtra’s cyber investigation machinery.
Another scare followed on March 4, 2026, when the district court and passport office received bomb-threat emails. The biggest coordinated threat came on August 18, when 16 schools and three other locations, including the district court, high court, Nagpur Municipal Corporation headquarters and collector’s office, received threat emails. Around 600 police personnel conducted searches amid evacuation exercises. Another threat warned of explosions on August 31, forcing several schools to consider keeping their campuses closed.
“Police identified regions where the latest threats emanated, but work is in progress,” said a cyber official. “The cyber infrastructure and specialised investigation units have so far failed to bring the guilty to justice,” said a lawyer. “Repeated threats forced judicial authorities to divert security personnel and interrupt regular proceedings, inconveniencing lawyers, litigants and court staff,” said another legal expert.
The threats repeatedly disrupted court proceedings, wasted working hours and triggered panic among judges, lawyers, litigants, students, parents, teachers, and govt employees. Senior police officials claimed investigations are underway, but cannot reveal progress. Despite extensive searches, evacuations and investigations, police have not publicly identified those behind recurring threats. The premises were searched by bomb disposal and dog squads, but nothing suspicious was found. Police conducted extensive searches, but termed it a hoax.
In Dec last year, the district and sessions court and the Nagpur bench of Bombay High Court received a bomb-threat email, claiming explosives would blow up the buildings by 2pm.
The investigation revealed the sender of the December 2025 court threat allegedly used Tor technology and two-factor authentication to conceal identity and location. In the August school threat case, police suspected use of a VPN and sought assistance from Gmail to trace the source. However, identities of senders have not been publicly established.