Suspect behind threats to Carlow schools may have hacked deceased American's email

Gardaí have described the incident as 'very strange', but said they were determined to fully investigate it. Picture: iStock

The person behind Wednesday’s email threats to Carlow primary schools is thought to have hacked the email of a deceased American, the Irish Examiner understands.

The individual sent emails from this account to 20 schools in the county threatening bomb attacks or mass shootings.

Gardaí believe an online tool was used to protect the hacker’s identity.

Virtual private network (VPN) technology hides the actual internet (IP) address of the user and encrypts their traffic. This can make it very difficult for authorities to trace communications back to them.

Gardaí in Carlow are thought to have sought the assistance of specialist technical gardaí to aid their investigation.

The Special Detective Unit is also assisting Carlow gardaí, with their focus on establishing the suspect’s motives and intent as well as their capabilities.

No demands made

Gardaí do not suspect a terrorist or political motivation to the email threats as there was no statement or demands in the emails for actions to be taken, or ransom to be paid, to prevent the threats from happening.

The threats were not deemed to be credible given the very large number of schools targeted and the absence of anything suspicious being found at any of the schools.

As a result, gardaí are focusing more on this being a possible prank or the actions of a person with a grievance or someone under pressure from an online network to make the threats.

The possibility of a hostile state being involved is not seen as very likely, given Carlow would not be particularly known internationally.

Sources said the fact that Carlow was the target could suggest that the suspect is based in Ireland and, possibly, has connections to Carlow.

Gardaí have described the incident as “very strange”, but said they were determined to fully investigate it.

It comes little over a week after threatening emails were sent to six schools in Co Antrim.

The PSNI did not consider those threats to be “credible”, and launched a “malicious communications investigation” in relation to the email, which was also sent to multiple businesses in the county.

In February 2025, an email threatening shootings was sent to a number of schools in Co Clare. The email contained details of a named individual in Co Clare and, following garda inquiries, it was declared a hoax.

• Cormac O'Keeffe is the Security Correspondent with the Irish Examiner.