Taylor Swift Toronto Eras Tour
A Canadian family and hundreds of others were scammed out of thousands of dollars for fake Taylor Swift concert tickets. X / Lucas Oil Stadium @LucasOilStadium

Beran A. made a bomb.

That is the bluntest possible summary of an indictment filed on Monday at Wiener Neustadt court, south of the Austrian capital, which accuses the 21-year-old of producing a quantity of triacetone triperoxide — TATP, the same volatile compound packed into the suicide vest that killed 22 people at Manchester Arena in 2017 — and of obtaining online instructions for building an IS-style shrapnel device designed to maim and kill concertgoers.

He did not act alone. But he was, prosecutors maintain, the ringleader.

Vienna's public prosecutors announced the charges on 16 February 2026, eighteen months after Austrian police arrested Beran A. in a dramatic raid on his home in Ternitz, Lower Austria, that saw more than 100 residents evacuated from surrounding streets. Officers told neighbours there'd been a gas leak. There hadn't. Inside, a bomb squad found chemical precursors, timers, blank ammunition, machetes, €21,000 in counterfeit banknotes and a stack of al-Qaeda propaganda material, police said at the time.

The indictment is extensive: membership of a terrorist organisation, manufacturing explosives, attempting to purchase weapons illegally, and disseminating Islamic State propaganda through encrypted messaging apps. If convicted on all counts, Beran A. faces a maximum sentence of 20 years.

His lawyer has previously disputed the accusations. No formal defence statement has been issued since Monday's charges.

The Plot

Strip away the legal language and what remains is chilling enough.

Prosecutors allege that Beran A., who holds dual Austrian and North Macedonian citizenship, pledged allegiance to IS and then set about planning a mass-casualty attack at one of Taylor Swift's three sold-out concerts at Vienna's Ernst Happel Stadium, scheduled for 8–10 August 2024. Over 195,000 people were expected across the three nights; the tickets had sold out within hours, the fastest in Austrian concert history.

The type of shrapnel bomb described in the indictment was 'specific to IS attacks,' the prosecutors' statement said. He is also believed to have sought direct advice from IS members on how to carry one out — or at least, that is what investigators concluded from the encrypted messages they recovered, though how much of that guidance was operational and how much was ideological bluster is a distinction the indictment does not appear to draw.

There is another allegation that surfaced only recently. Beran A. had allegedly planned an earlier attack in Dubai in March 2024 as part of what reports described as three coordinated IS bombings. He changed his mind at the last minute.

Whether that hesitation was conscience, cold feet or simply logistics is anyone's guess.

A Gas Leak That Wasn't

The arrest itself, on 7 August 2024, was a sizeable operation. Armed police descended on Beran A.'s house in Ternitz with a cover story for the neighbours and a bomb disposal unit following close behind. He was 19. The other two suspects detained that month were younger still: an 18-year-old Iraqi refugee whose residence permit was immediately revoked, and a third individual whose details remain largely sealed.

Omar Haijawi-Pirchner, head of Austria's Directorate of State Security and Intelligence, told reporters the suspect had wanted to kill 'as many people as possible using the knives or even using the explosive devices he had made.'

Blunt. But then so was the evidence.

One of the three suspects — a Syrian teenager identified as Mohammad A. — was later tried in Berlin and convicted last August of preparing a serious act of violence and supporting a terrorist act abroad. He received a suspended 18-month sentence under juvenile criminal law. Not imprisoned. The distinction is worth noting, and it did not go unnoticed in Vienna.

The CIA Tip-Off

None of this would have unravelled without American intelligence, and the Americans have been quite happy to say so.

CIA Deputy Director David Cohen said publicly in August 2024 that the plotters had been 'plotting to kill a huge number — tens of thousands of people at this concert, including, I am sure, many Americans — and were quite advanced in this.' The agency, he added, had shared information with Austrian partners to 'enable the disruption' of the threat.

Then-White House national security spokesman John Kirby confirmed the same: 'The United States did share information with Austrian partners to enable the disruption of a threat to Taylor Swift's concerts there in Vienna.'

It worked. Three concerts were cancelled within hours of the first arrest. The speed of the response suggests Austrian authorities had been briefed well before the public knew anything was wrong.

Swift's Response

Taylor Swift said nothing for weeks.

When she did speak, on Instagram, the words landed with a weight that her usual social media posts do not carry. 'Having our Vienna shows cancelled was devastating,' she wrote. 'The reason for the cancellations filled me with a new sense of fear, and a tremendous amount of guilt because so many people had planned on coming to those shows.'

And then the line that stuck: 'But I was also so grateful to the authorities because thanks to them, we were grieving concerts and not lives.'

She explained she had waited until the European leg of her tour finished before addressing it publicly. She didn't want to provoke anyone who might target her fans. Fair enough, though the silence frustrated some followers at the time.

In December 2025, Swift's documentary The End of an Era showed her meeting families affected by the Southport knife attack — a separate atrocity at a Swift-themed children's dance party in England, where three young girls were killed. The footage was raw. She wiped away tears on camera before steadying herself: 'It's going to be fine, because when I meet them, I'm not going to do this. I swear to God, I'm not going to do this.'

Chalk on the Pavement

Something rather strange happened in Vienna on 8 August 2024.

Thousands of Swifties who'd already arrived — many having flown in from across Europe, booked hotels they could not refund, assembled outfits they'd spent weeks planning — gathered in public squares and just started singing. They swapped friendship bracelets. They wrote messages in chalk on the pavement and they held each other, and for a few hours the city centre looked less like the aftermath of a terror scare and more like an impromptu festival.

Some fans were furious about the money. Ticket refunds covered face value but not the flights, the accommodation, the whole production of being a Swiftie in a foreign city. A few said they had spent upwards of €2,000 on a weekend that simply vanished.

But the mood in those squares was not bitterness. It was something closer to defiance — the communal stubbornness that tends to follow these things, a flat refusal to let the fear win even when the fear is entirely rational. It looked a bit like what happened in Manchester after the Arena bombing: grief and anger and music, all tangled together.

Mind you, the same crowds would have been inside Ernst Happel Stadium had the CIA's tip-off landed 48 hours later. That thought — how close it came, how mundane the margin was between a cancelled concert and a massacre — is the part of this story that resists tidy conclusions.

The criminal case against Beran A. will proceed at Wiener Neustadt court. No trial date has been set.