The 2012 Burgas bus bombing was a terrorist attack carried out by a suicide bomber on a passenger bus transporting Israeli tourists at the Burgas Airport in Burgas, Bulgaria, on 18 July 2012. The bus was carrying 42 Israelis, mainly youths, from the airport to their hotels, after arriving on a flight from Tel Aviv. The explosion killed the Bulgarian bus driver and five Israelis and injured 32 Israelis, resulting in international condemnation of the bombing.
In February 2013, Tsvetan Tsvetanov, the Bulgarian Interior Minister, said there was "well-grounded" evidence that Hezbollah was behind the attack. Tsvetanov stated that the two suspects had Canadian and Australian passports and lived in Lebanon. According to the Europol, forensic evidence and intelligence sources all point to Hezbollah's involvement in the blast. Both Iran and Hezbollah have denied any involvement. On 5 June 2013, new Bulgarian Foreign Affairs Minister Kristian Vigenin stated that: "There is no conclusive evidence for the implication of Hezbollah in the July 2012 bombing in Burgas. The authorities continue to gather evidence."Bulgaria: No Conclusive Hezbollah Link for Burgas Bombing – Novinite.com – Sofia News Agency However, two weeks later a Bulgarian representative to the European Union revealed that investigators discovered new evidence that implicates Hezbollah operatives were connected to the terrorist attacks. Investigators found that the forged documents used by the perpetrators of the attack were facilitated by a man with ties to Hezbollah. In July 2013, the newly appointed Bulgarian Interior Minister Tsvetlin Yovchev stated: "there are clear signs that say Hezbollah is behind the Burgas bombing."Hezbollah behind bombings
On 25 July 2013, the Bulgarian Interior Ministry released photographs of two Hezbollah operatives suspected in the bombing: Australian citizen Malid Farah (also known as "Hussein Hussein"), and Canadian citizen Hassan al-Haj.Photos of Burgas attack suspects released – Ynetnews (25 July 2013) In 2013, and partly in response to the bombing, the EU unanimously voted to list the military branch of Hezbollah as a terrorist organization.
On 18 July 2014, Bulgaria announced that they identified the bomber as a dual Lebanese-French citizen named Mohamad Hassan El-Husseini. Over 12 years after the attack, in April 2025, following a negotiation with Lebanon's former head of intelligence Abbas Ibrahim, the Bulgarian authorities released the bomber's remains for burial in Lebanon. Although Hezbollah never formally claimed responsibility for the attack, El-Husseini was buried in a southern Beirut cemetery designated for the organization's fallen fighters.
Attack Six civilians and the suicide bomber were killed and at least 32 were injured in an explosion on an Israeli-operated tour bus at the Burgas Airport in the Black Sea city of Burgas. In addition, two other buses were damaged in the blast.Bulgaria says Israelis killed by suicide attacker by Veselin Toshkov Associated Press 19 July 2012
Bulgarian leaders, including President Rosen Plevneliev, rushed to the site. The Foreign Ministry said authorities believed that the blast was a terrorist attack. According to the initial reports of Bulgarian authorities, the blast was caused by a bomb in a luggage compartment. However, it was later argued by a Bulgarian official that the blast was probably carried out by a male suicide bomber with fake US documents.
An 11-year-old child and two pregnant women were among the injured, while another pregnant woman was killed. Mustafa Kyosev, the Bulgarian bus driver, was also killed at the age of 36.
Survivors of the attack described people being thrown into the air, people shouting and crying, and recalled seeing body parts. The witnesses said that the explosion began at the front of the bus and sent fire down through the vehicle. Some passengers on the bus jumped out of windows to escape.
Two days after the attack, Bulgarian Interior Minister Tsvetan Tsvetanov said that the bomb was carried in the backpack of a man who was filmed on security cameras at the airport. Tsvetanov added that the bomb was detonated in the luggage compartment of the bus, and that the blast was caused by 3 kilograms of TNT powder. In 2020, however, the bomb was identified as an ammonium nitrate-based device.
Fatalities Maor Harush (24) Acre—Israeli tourist Itzik Kolangi (28) Petah Tikva, Israel—Israeli tourist Mustafa Kyosov (36) Yurukovo, Bulgaria—Bus driver Amir Menashe (28) Petah Tikva, Israel—Israeli tourist Elior Preiss (25) Acre, Israel —Israeli tourist Kochava Shriki (42, pregnant) Rishon LeZion, Israel—Israeli tourist Mohamad Hassan El-Husseini (25) France—The bomber, dual Lebanese-French citizenship
Perpetrator investigations Following the attack, a probe was launched to determine who was responsible for the attack. Bulgarian Interior Minister Tsvetan Tsvetanov said that the investigation might take years. On 12 August, a probe into the attack concluded that the perpetrator was a suicide bomber, which disproved other possible theories, such as being a deluded drug smuggler. On 17 August, Tsvetanov said that the probe indicated that a country or terrorist organization was responsible for the bus bombing, but did not name any suspects.
Description On 19 July, Tsvetanov stated that the suspected attacker is seen on security camera tape near the bus for about an hour before the blast and that he had a fake driver's license from the U.S. state of Michigan. The suspected bomber was described as a white male with long hair and wearing glasses.Kulish, Nicholas & Brunwasser, Matthew. Suicide Attacker With Fake U.S. ID Blamed in Bus Bomb The New York Times. Retrieved 19 July 2012.
Burgas prosecutor Kalina Tchapkanova quoted witnesses who said that the perpetrator "spoke English with a slight accent" and appeared to be Arab, while the wife of the owner of a car rental service said she was sure that the perpetrator was of Arab origin, and that he had a shaved head. The Bulgarian prosecutors said that the attacker had short hair, as opposed to the long hair seen in footage captured by a security camera at the airport, while a witness said that the perpetrator appeared to be wearing a wig. Other witnesses said that they saw the perpetrator speaking to tourists at local beaches in the days prior to the attack, and one witness said that the man told a group of tourists that his mother was Dutch and his father was Iranian.
On 24 July, Bulgarian prime minister Boyko Borisov said that a sophisticated group of conspirators who spent at least a month in Bulgaria before the bombing were responsible for the terrorist attack, confirming suspicions that the perpetrator was not alone. Prime Minister Borisov said that those involved in the bombing used leased vehicles and moved in different cities so they wouldn't be seen together. He added that the perpetrators were "exceptionally skilled" and that they operated under "strict conspiracy rules." Prime Minister Borisov said that officials believe he might have flown into Bulgaria from a European country in the Schengen passport-free travel zone, of which Bulgaria was not yet a member, and Bulgaria is exploring that lead with officials in other European countries. Prime Minister Borisov added that DNA samples from the suicide bomber was shared with all partner security services, but no match has been found yet in their databases. European security officials also said that images of the suicide bomber have not yet matched any of their databases, but it's possible the suicide bomber was not on a watch list.
On 5 February 2013, it was reported that the suspect was a dual Canadian-Lebanese national living in Lebanon.
On 18 July 2014, Bulgaria announced that they had identified the bomber as 25-year-old Lebanese-French citizen Mohamad Hassan El-Husseini through DNA testing. In April 2025, his remains were repatriated to Lebanon following negotiations with Bulgaria and was buried in a cemetery designated for Hezbollah fighters.
Accomplices On 16 August, the Bulgarian authorities released a computer-generated image of a suspected accomplice, saying that "There is data that the man is related to the terrorist attack at the airport." The authorities thought it belonged to the suicide bomber, but a facial reconstruction determined that this was not the case, and raised the possibility of an accomplice. The authorities said that the suspected accomplice may have used various aliases while planning the terrorist attack, and used a fake driving license registered to "Ralph William Rico" from Grand Rapids, Michigan.
On 21 August, a man from Plovdiv, a southern Bulgarian, said that he recognized the suspected accomplice, who he said he worked with for five years, and said that the accomplice is a Bulgarian who has been involved with people who preach Islamic extremism. Bulgarian police were investigating this lead as well.
In late August, on behalf of the Bulgarian government, Interpol attempted to recruit the help of member nations to identify one of the suspects in the investigation, and posted on its website an image of the alleged accomplice, urging anyone who had information about his identity to notify the authorities. The posted images include a copy of the fake driver's license in which the suspect seems to be wearing a wig. Interpol described the suspect as having possible Middle Eastern origin, 1.70–1.75 meters tall, and dark brown hair and eyes, who speaks English with an accent.
In October, Tsvetanov announced that the terrorist responsible for the attack had a maximum of five accomplices, all of which were foreign, and that the terrorist attack was plotted outside of Bulgaria for a year and a half.
Hezbollah and Iran Immediately following the attack, Israeli prime minister Benjamin Netanyahu accused Hezbollah of carrying out the attack with the backing of Iran. Netanyahu vowed that Israel would "react firmly [to this] global Iranian terror onslaught"; Israeli president Shimon Peres promised retaliation against 'Iranian terrorist sites' around the world. Iran denied responsibility for the act. An Iranian Foreign Ministry spokesman rejected Netanyahu's accusation that the bombing was carried out by Hezbollah as a proxy for Iran as "baseless."
On 19 July, The New York Times reported that United States officials identified the suicide bomber as a member of Hezbollah. An unnamed senior official told The New York Times that the bomber had a fake Michigan driver's license, but there are no indications that he had any connection to the United States. He added that the attacker was "acting under broad guidance" to hit Israeli targets when opportunities presented themselves and that this guidance was given to Hezbollah from Iran, which uses Hezbollah as a proxy. Two other anonymous officials added that Hezbollah was behind the bombing, although declined to offer further information. One of the officials interviewed declined to describe what specific intelligence led to the belief that the bomber was from Hezbollah.