Situation Summary
Bulgaria faces a moderate composite threat environment with elevated near-term disruption risk driven by a sustained campaign of bomb-threat emails targeting government and judicial infrastructure, compounded by elevated road-traffic fatalities and a significant weapons-seizure operation in the western region. The three-day email campaign (through 7 July) has generated widespread evacuations and police response but no confirmed explosive devices; however, the sustained nature and geographic spread suggest either coordinated hoax activity or an ongoing threat probe. Overall security posture remains stable, but operational disruption and border congestion are affecting movement and institutional function.
Key Developments
- Sofia (central institutions) – 7 July 2026
Multiple bomb-threat emails received by Interior Ministry, courthouses, and other government buildings; staff and visitors evacuated, security sweeps conducted, no hazardous devices located. This marks the third consecutive day of similar threats across the capital.
- Nationwide (courthouses, public buildings) – 7 July 2026
Wave of coordinated bomb-threat emails reported before noon across multiple cities including Plovdiv, Varna, and Burgas, prompting building evacuations and police-led security checks; no explosive devices found.
- Kalotina Border Crossing (Serbia–Bulgaria) – 7 July 2026
Heavy congestion reported at the checkpoint near Dragoman, creating travel delays and elevated exposure to petty crime and fraud typical of crowded border posts.
- Nationwide roads – 7 July 2026 (last 24 hours)
Interior Ministry and Radio Bulgaria reported 37 injured and 5 killed in traffic accidents across multiple regions, underscoring persistent road-safety risk for business and personnel mobility.
- Dobrich region (Northeastern Bulgaria) – 6–7 July 2026
Powerful wind storm caused dozens of accident reports, infrastructure damage, and emergency-service calls across the region.
- Sofia (traffic enforcement) – 7 July 2026
Traffic police detected 43 e-scooter rule violations in 8 hours, indicating intensified enforcement activity and accident/penalty risk for personal mobility device users.
- Pernik region (Western Bulgaria) – 6–7 July 2026
Police operation resulted in seizure of illegal firearms, ammunition, and explosives cache; three individuals detained. Suggests localized violent-crime risk in the western corridor.
Highest-Risk Areas
Sofia-City (risk score 72) and Plovdiv (68) dominate the sub-national ranking, driven by institutional disruption from the ongoing bomb-threat campaign and urban-density exposure to traffic, petty crime, and public-order incidents. Coastal and port cities (Varna, Burgas) score elevated risk due to transit congestion, organized-crime pressure, and seasonal volume. Western industrial regions (Pernik, Ruse) carry elevated weapons and violent-crime indicators. Sofia-City's institutional concentration and government presence amplify operational disruption impact on corporate and multinational operations.
How GeoBit Would Assist
Teams operating in Bulgaria should employ AOI Monitoring & Early Warning on high-risk institutions and border crossings (Kalotina, Sofia airports) to detect emerging threats or congestion patterns in real time. Intel Sweep and OSINT fusion on local media, Telegram channels, and court/police statements will provide early signals of threat-campaign escalation or copycat activity. Routing & Network Analysis can identify safer and alternative travel corridors during periods of border congestion, road accidents, or institutional disruption.
7-Day Outlook
The bomb-threat campaign is likely to persist through mid-week absent law-enforcement attribution; institutional operations will remain periodically disrupted. Road-traffic fatality rates typically remain elevated in summer months, particularly in provinces with weather volatility (Dobrich, Ruse). Border wait times at Kalotina are expected to normalize within 48–72 hours unless additional incidents occur.
Highest-Risk Areas — Ranked
| # | State / Region | Risk |
|---|---|---|
| 1 | Sofia-City | 72 |
| 2 | Plovdiv | 68 |
| 3 | Varna | 65 |
| 4 | Burgas | 62 |
| 5 | Sofia | 58 |
| 6 | Ruse | 55 |
| 7 | Stara Zagora | 52 |
| 8 | Sliven | 50 |
| 9 | Shumen | 48 |
| 10 | Razgrad | 47 |
| 11 | Yambol | 45 |
| 12 | Dobrich | 44 |
Sources
Previous Daily Briefs
A new Bulgaria brief is written every day — each with its own risk map and downloadable CSV. Here's the last week; use the calendar to go further back.
📅 Browse every day by calendar →
Highlighted days have a brief. Tap a day for that day's map & analysis, or “csv” for that day's dataset ($5).
Atlas — our AI intelligence desk — emails them this snapshot personally. Nothing else, no list.