How Germany responded when a passenger jet triggered a hijack alert over Europe

Two Eurofighter jets scrambled, police cordoned off Nuremberg Airport and flight operations were suspended after a Corendon Airlines aircraft transmitted a hijack code and lost radio contact. The aircraft eventually landed safely, with the airline blaming a malfunction in its communication system.

A routine flight from the Greek island of Corfu to the German city of Nuremberg turned into a major aviation security operation on Tuesday, October 13, when a passenger aircraft transmitted an emergency code associated with hijacking and its pilot could no longer be reached by radio.

The alert was serious enough to set Germany's air defence response in motion. Two Eurofighter fighter jets were scrambled from Neuburg Air Base in southern Germany to intercept the aircraft and accompany it towards Nuremberg. On the ground, police cordoned off the airport, special police units were deployed and flight operations were temporarily suspended.

For those watching the incident unfold, the central question was straightforward, had a passenger aircraft been hijacked, or was something else preventing the crew from communicating with authorities?

The answer emerged only after the aircraft landed safely and the authorities had assessed the situation on the ground. Corendon Airlines subsequently attributed the alert to a malfunction in its radio communication system, stating that neither the passengers nor the crew had been in danger.

The episode offered a glimpse into how aviation security systems respond when an aircraft's signals indicate a potentially serious threat, even when the underlying cause remains unknown.

The four digits that triggered a security response

The incident centred on a four-digit transponder code: 7500.

Aircraft use transponders to transmit identifying information to air traffic control. Among the codes available to pilots are specific signals that communicate emergencies without requiring a detailed radio conversation. Code 7500 indicates unlawful interference with an aircraft and is internationally associated with a hijacking.

According to German police, the aircraft transmitted the code while flying through Croatian airspace. At the same time, the pilot could no longer be reached by radio.

The combination of these two developments raised the stakes. A transponder signal indicating a possible hijacking is serious in itself. When radio contact is also lost, authorities cannot readily establish what is happening inside the cockpit or obtain an explanation from the flight crew.

German police said the code had been transmitted and that the pilot was no longer contactable by radio. They added that various alarm scrambles were triggered for safety reasons.

At that stage, the authorities could not assume that the signal was merely a technical fault. A communication malfunction was one possible explanation, but it had not yet been established.

That distinction is central to aviation security, the response must be guided by the threat indicated by the available information, rather than by an explanation that has not been verified.

Two Eurofighters take to the skies

Germany's response moved beyond monitoring the aircraft through civilian air traffic control. Two Eurofighter jets were scrambled from Neuburg Air Base, according to a German air force spokesperson. The fighters intercepted the passenger aircraft and accompanied it until it landed at Nuremberg Airport.

The jets remained involved until the authorities could rule out the possibility of the aircraft taking off again, according to the contemporaneous reports.

Germany maintains alert arrangements involving fighter aircraft to assess situations in which communication with civilian aircraft is lost. According to the German air force's website, the country has two such alert units, each comprising two fighter jets. Incidents involving lost communication reportedly occur about once or twice a month.

These arrangements allow military aircraft to respond quickly when an unidentified or unresponsive situation involving a civilian aircraft requires assessment.

The deployment does not, by itself, establish that a hijacking has taken place. Rather, it provides authorities with a way to assess the aircraft and its behaviour when normal communication channels are unavailable or a potential security threat has been identified.

In the Nuremberg incident, the Eurofighters accompanied the Corendon aircraft towards its destination while the ground response was being prepared.

Nuremberg Airport goes into emergency mode

As the aircraft approached its destination, the security response extended to the airport itself. Nuremberg Airport, also known as Albrecht Dürer Airport, announced that flight operations had been suspended because of an aviation emergency. Police cordoned off the facility and blocked access as the situation was assessed.

Members of a special police operations unit were also deployed.

Such measures can have consequences well beyond the aircraft involved. An airport is a tightly coordinated environment in which aircraft movements, passenger access, ground services and emergency arrangements must operate together. When a serious security alert is received, restricting movements and access can help authorities manage the situation while the facts are established.

In this case, the airport's temporary shutdown affected both arrivals and departures.

Flights scheduled to arrive from Amsterdam and Cluj in Romania were reported cancelled, while services from Girona and Alicante faced delays. Departures were also delayed, with disruption extending to flights scheduled for later in the afternoon.

The interruption illustrated how a single aircraft emergency can affect an entire airport's operations, even when the aircraft itself eventually lands without incident.

The landing turned into the first major turning point

The Corendon Airlines aircraft landed safely at Nuremberg at 12.16 pm local time, according to the contemporaneous reporting. It was approximately one minute behind its scheduled arrival time. The safe touchdown was an important milestone, but it did not immediately bring the security operation to an end.

Authorities still had to assess the aircraft and establish whether there was an ongoing threat. Police continued their investigation on the ground, while passengers remained aboard for a period following the landing.

About an hour later, police announced that there was no danger. Passengers were subsequently allowed to disembark and were to be transferred by bus to the arrivals hall.

The presence of specialist police personnel and the controlled disembarkation formed part of the response as authorities brought the incident to a close. By then, the immediate uncertainty surrounding the aircraft had eased. But the explanation for the alert was still a matter requiring clarification.

Airline points to a radio malfunction

Corendon Airlines subsequently said the aircraft had transmitted the emergency code accidentally because of a brief malfunction in its radio communication system.

The airline said the incident occurred while the aircraft was in Croatian airspace and insisted that no emergency situation had occurred. It stated that passengers, flight crew and the aircraft had not been in danger, adding that the situation had been monitored and investigations initiated before the aircraft landed safely.

The airline's explanation provided a possible technical cause for the alarming sequence of events. However, the distinction between the initial alert and the subsequent explanation remains important: authorities had to act on the information available when the code was transmitted and radio contact was lost.

A technical malfunction can produce an alarm that resembles a security emergency. But until the cause is established, the consequences of treating a genuine hijacking alert too lightly could be severe.

The incident therefore highlighted the challenge facing both airlines and security authorities: distinguishing a false alarm from a real threat without compromising the safety of those on board.

What happens when a hijack alert is received?

A hijack alert does not automatically mean that an aircraft has been seized by force. It signals a situation that must be treated seriously and assessed by the relevant authorities.

The precise response depends on the information available, the aircraft's location and the circumstances of the alert. The Nuremberg incident nevertheless illustrates several important elements of a typical aviation security response.

First, the signal is assessed. Air traffic control and the relevant authorities must establish what the aircraft is transmitting and whether communication with the crew is possible. An unexplained loss of contact alongside a hijack code increases the urgency of the situation.

Second, the aircraft may be intercepted. Military aircraft can be scrambled to identify and visually assess the aircraft, monitor its movements and escort it where necessary. In this incident, two German Eurofighters performed that role.

Third, authorities prepare the destination airport. Police and airport personnel may restrict access, coordinate emergency arrangements and prepare to receive the aircraft under controlled conditions. Nuremberg's airport operations were temporarily suspended and police cordoned off the facility.

Fourth, the aircraft is assessed after landing. A safe landing does not, on its own, establish that the threat has ended. Authorities must determine whether there is any continuing danger before allowing normal activities to resume. In Nuremberg, police subsequently declared that there was no danger and passengers were permitted to leave the aircraft.

These stages should not be understood as a fixed sequence that applies identically to every incident. Aviation security responses are tailored to the circumstances. The Nuremberg operation demonstrates how military surveillance, civilian aviation coordination and police measures can come together when a potentially serious threat is reported.

An airport already on alert after suspected drone sightings

The hijack alert occurred against a backdrop of heightened vigilance at Nuremberg Airport.

Earlier on Tuesday, three pilots independently reported sightings of an object that might have been a drone during take-off and landing operations between 2 am and 4 am local time, according to police.

The airport's border police inspectorate began investigating the reports. Authorities deployed a helicopter, among other measures, but were unable to verify the object's identity. The reports had already caused temporary disruptions to air traffic overnight.

The suspected drone sightings and the later aircraft emergency were separate incidents. The available reports do not establish a connection between them. Nevertheless, the earlier reports added to an already disrupted operational day at the airport.

Germany has been particularly attentive to airport security following a separate incident at Leipzig/Halle Airport on August 4, when a drone carrying an explosive device was found near the southern runway. Flights were grounded while an anti-explosive robot examined the object.

German authorities described the explosives-laden drone as a new form of hybrid attack and blamed Russia for that incident. Russia denied involvement.

That earlier case should not be confused with the Nuremberg emergency: there is no established evidence in the supplied reports linking the two events.

When a security alert becomes an operational challenge

Nuremberg Airport is one of two major airports in the southern German state of Bavaria, alongside Munich. It handled nearly 550,000 passengers in August, making it Germany's fifth-busiest airport that month by passenger volume, according to figures from the Working Group of German Airports.

For an airport of this scale, suspending flight operations can disrupt a wide network of arrivals, departures and ground activities.

The incident demonstrated how an emergency involving a single aircraft can create uncertainty across that network. The aircraft must be monitored, military and civilian authorities must coordinate, the destination airport must prepare for the arrival, and police must determine whether the threat extends beyond the aircraft.

Even when an incident ends without injuries or confirmed danger, the response can involve significant operational disruption.

The fact that flight operations later returned to normal was therefore an important part of the resolution. It marked the transition from emergency response to the restoration of routine airport activity.

Respond first, establish facts later

The Corendon Airlines incident ended with a safe landing, passengers leaving the aircraft and the airline attributing the hijack alert to a radio communication malfunction. But the sequence of events also showed why aviation authorities cannot rely on an assumption that an alarming signal is harmless.

A hijack code accompanied by the loss of radio contact creates a serious uncertainty. Military aircraft can provide an additional means of assessing the situation, while police and airport authorities can secure the ground environment and prepare for the aircraft's arrival.

The challenge is to respond proportionately without allowing uncertainty to become complacency. An alert that ultimately proves to be a false alarm still has to be handled carefully because the same initial signals could, in another situation, indicate a genuine threat.

For Germany, the immediate outcome was reassuring as the aircraft landed safely and police found no danger and airport operations resumed.

The broader lesson for aviation is equally clear. When communication fails and a hijack alert is transmitted, the priority is to establish control of the situation, protect those on board and verify the facts before declaring the emergency over.