Bhubaneswar: On January 8, 2026, India's judicial system witnessed an unprecedented cyber scare. District courts across eight states – Odisha, Punjab, Bihar, Haryana, Chhattisgarh, Gujarat, Kerala and Uttar Pradesh – received almost identical bomb threat emails claiming that RDX explosives had been planted inside court premises. Courtrooms were evacuated, bomb squads rushed in, hearings were halted and thousands of litigants were left waiting.

Within hours, every single threat turned out to be a hoax.

Six months later, however, the national picture has changed dramatically.

The coordinated campaign that had targeted courts across multiple states has now shrunk to one state alone – Odisha.

While other states have largely managed to prevent a recurrence of such coordinated disruptions, Odisha's district courts have once again become the preferred target of anonymous bomb threat emails. After another round in February, a lull followed.

But in July, the hoaxer returned with renewed intensity, sending simultaneous threat emails to seven district courts within days, forcing repeated evacuations, deployment of bomb disposal squads and suspension of judicial work.

The contrast is striking.

What began as a nationwide security challenge has now become an Odisha-specific vulnerability.

The obvious question confronting investigators is: Why have Odisha's district courts become sitting ducks for hoax bombers while the rest of the country appears to have broken the cycle?

The Pattern: From Nationwide Panic to Odisha-Centric Targeting

The chronology itself tells the story.

January 8, 2026

The first coordinated cyber attack targeted courts in at least eight states simultaneously. Automated emails, allegedly carrying the signature of the LTTE and referring to RDX explosives, triggered massive evacuations. Odisha's Cuttack, Sambalpur and Deogarh courts were among those affected. Every threat was eventually declared false.

February 2026

Instead of disappearing completely, the campaign resurfaced in Odisha. Courts in Puri, Phulbani and parts of Cuttack again received similar emails, indicating that Odisha remained on the radar even after other states had largely stopped reporting coordinated attacks.

March to June

A relative calm prevailed. There were no major coordinated waves reported across the country.

July 2026

The silence ended abruptly.

Beginning with Bhubaneswar and later extending to Balasore, Angul, Sambalpur, Jharsuguda and Jagatsinghpur, multiple district courts received bomb threat emails almost simultaneously, forcing police, bomb disposal squads and dog squads into repeated emergency operations.

By July 17, at least 12 district courts across Odisha had received such hoax emails during 2026, each resulting in evacuation and extensive sanitisation before being declared safe.

The geographical pattern has narrowed dramatically.

The national campaign has effectively transformed into an Odisha-centric campaign.

Flashback: India Defeated the 2025 Hoax Bomb Epidemic

This is not the first time India has faced an epidemic of fake bomb threats.

Throughout 2024 and 2025, airports, airlines, schools, hospitals and hotels witnessed an unprecedented surge in anonymous bomb threat emails.

Hundreds of flights were delayed or diverted.

Schools suspended classes.

Hospitals initiated emergency evacuation drills.

Recognising the growing national security challenge, the Centre introduced multiple corrective measures.

Among them were:

• stronger coordination between the Ministry of Home Affairs and the Indian Cyber Crime Coordination Centre (I4C);
• improved email header analysis and metadata tracking;
• stricter prosecution of offenders;
• enhanced cyber forensic capabilities;
• standardised threat assessment protocols for aviation and critical infrastructure.

As investigative capabilities improved and several perpetrators were traced and arrested, the frequency of large-scale coordinated hoax attacks against airports and educational institutions gradually declined.

The nationwide panic subsided.

Ironically, while those sectors became more resilient, Odisha's district courts continue to witness repeated disruptions.

Why Did Other States Break the Pattern?

Security experts point towards a combination of technological upgrades and coordinated policing.

Several states integrated judicial communication channels more closely with national cyber monitoring systems, enabling suspicious automated emails to be identified more quickly.

Investigators also shifted strategy.

Instead of merely chasing VPN-generated IP addresses, cyber teams increasingly relied on metadata analysis, email creation timelines and digital behavioural signatures to identify suspects.

Public arrests in several states also created a deterrent effect.

The message was clear: anonymous digital threats would no longer remain anonymous forever.

Consequently, the cycle of repeated attacks gradually weakened.

Why Has Odisha Become the Sitting Duck?

The continuing attacks do not necessarily mean Odisha is less prepared physically.

Every threat has triggered immediate evacuation, anti-sabotage checks and deployment of bomb disposal squads.

The challenge lies elsewhere.

Decentralised Digital Infrastructure

Unlike airports or other centrally protected critical infrastructure, many district court registries operate through separate email systems, creating multiple publicly accessible entry points that can easily be targeted through automated bulk emails.

Guaranteed Operational Disruption

The sender knows exactly what will happen.

Every email compels authorities to evacuate judges, lawyers, litigants and staff before bomb squads sanitise the premises.

Even though every threat has proved false, the disruption is real.

Court proceedings stop.

Hearings are adjourned.

Judicial time is lost.

That makes courts attractive targets for anyone seeking maximum disruption at minimal cost.

Sophisticated Digital Masking

Investigators continue to face familiar cyber obstacles.

The emails frequently travel through VPN chains, encrypted proxy servers and overseas routing paths, making attribution extremely difficult. Early investigations have indicated links extending beyond Odisha, requiring complex inter-state coordination.

Potential Local Motives

Investigators have not ruled out the possibility that some threats may be intended not merely to create panic but to delay court proceedings involving sensitive criminal, land or civil disputes.

Whether these are organised cyber campaigns or copycat attempts remains under investigation.

The Larger Question

Odisha Police have responded swiftly every single time.

Every district court has been sanitised.

Every threat has ultimately proved false.

Yet the hoax emails keep returning.

That raises an uncomfortable question.

If the nationwide campaign that began on January 8 has virtually disappeared elsewhere but continues to repeatedly target Odisha's district judiciary, is the state confronting merely a cyber nuisance – or does it expose a larger gap in digital protection, coordinated cyber intelligence and judicial communication infrastructure?

Also Read: Why No Breakthrough Yet in IIC Beauty Mohanty's Death? Probe Awaits Key Forensic Evidence Amid No Clear Motive | Special Report