Weekly Global Explosives Incident Brief: 2026/04/06- 2026/04/12

edwin.a.bundy@gmail.com -
April 13, 2026
IGMBT Weekly Explosives Incident Brief

Period: Monday 6 April 2026 – Sunday 12 April 2026

Classification: UNCLASSIFIED // OSINT

Prepared for: International Guild of Master Bomb Technicians

Prepared: 13 April 2026

NOTE ON CONVENTIONAL CONFLICT EXCLUSIONS: The reporting period coincides with active conventional military operations in Lebanon (Israeli Operation Eternal Darkness, 8 April), Iraq (U.S. strikes on Iran-backed PMF targets, 6-8 April), and the ongoing Russia-Ukraine war. These generate high volumes of conventional munitions employment that fall outside this brief’s scope. Only IED, improvised explosive, criminal explosive, and ERW incidents are carded in the main body. Conventional conflict context, including IED/asymmetric second-order effects, is addressed in the Appendix.

Audio Summary

Executive Snapshot

  • Lead story – British Isles: A viable IED was rendered safe by ATO in Glenarm, County Antrim on 6 April. Three individuals were arrested, one subsequently charged. The incident follows the New IRA’s claimed proxy bomb attack on Lurgan police station (31 March, just outside this window), establishing a pattern of accelerating dissident republican targeting of PSNI infrastructure with improvised devices in Northern Ireland.
  • Pakistan: TTP detonated a motorcycle-borne IED against a police patrol in Lakki Marwat, Khyber Pakhtunkhwa on 7 April, injuring five officers. The attack continues a sustained TTP campaign of IED strikes along the Bannu-DI Khan highway corridor targeting mobile and static police assets.
  • North America – Terror: A federal grand jury in New York unsealed an indictment on 8-9 April charging two men with terrorism and WMD offenses for a March 7 TATP IED attack outside Gracie Mansion. The indictment revealed TATP construction with shrapnel enhancement, ISIS allegiance, and expressed intent to kill up to 60 people – the most operationally detailed ISIS-inspired device plot disclosed in the U.S. in several years.
  • North America – Criminal: A pipe bomb cache was discovered at a McMinnville, Oregon mobile home on 6 April, resulting in the arrest of a 38-year-old man on five counts including possession of a destructive device. No identified target or ideological motive at time of reporting.
  • India: A crude bomb detonated during a police search operation in Begusarai, Bihar on 11 April, injuring five officials including STF personnel. The device was linked to a robbery suspect’s premises rather than political violence.
  • Europe – HAYI Campaign (Ongoing): The shadowy pro-Iranian network HAYI continued to drive European counterterrorism attention through the reporting week. CNN published a significant analytical piece on 11 April noting inconsistencies in the group’s authenticity. The Netherlands formally joined France, Belgium, and the UK in coordinated law enforcement action against HAYI-linked networks. The Paris Bank of America plot (IED, late March) and related European incidents remain under active terrorism prosecution, with four suspects including three teenagers facing charges as of the reporting period.
  • Russia/Ukraine partisan: On 12 April, the Atesh pro-Ukrainian partisan movement claimed sabotage of a military freight locomotive in Russia’s Rostov Oblast. Sabotage of military logistics infrastructure by IED-capable partisan groups continued throughout the week, consistent with ongoing resistance patterns.
  • Data quality note: Several Sahel, Southeast Asia, and Caribbean searches returned thin or no results for April 6-12 specifically. This reflects reporting lag, media suppression, and the dominance of Lebanon/Iraq conventional conflict news during this period, not necessarily an absence of incidents.

Incident Ledger

#CountryCity/AreaCategoryTypeDeviceTargetCasualtiesConfidence
1United Kingdom (N. Ireland)Glenarm, Co. AntrimUnknown/Dissident RepublicanDiscovery / DisruptionViable IED (nature unspecified)Unknown (rural road area)NoneConfirmed
2PakistanLakki Marwat, KPTerror/Insurgent (TTP)DetonationRCIED (motorcycle-borne)Police patrol5 injuredConfirmed
3United StatesMcMinnville, ORCriminal / UnknownDiscoveryPipe bombs + materialsUnknownNone (arrest)Confirmed
4United StatesNew York City, NYTerror (ISIS-inspired)Attempted DetonationTATP IED x2, shrapnel-enhancedNYC Mayor’s residence / protest crowdNone (devices failed)Confirmed
5IndiaBegusarai, BiharCriminal / UnknownDetonationCrude bombPolice/STF search team5 injured (minor)Confirmed
6Russia / UkraineRostov Oblast, RussiaConflict-related (Partisan)SabotageUnspecified sabotage deviceMilitary freight locomotiveUnknownProbable

Incident Cards

CARD 1: Viable IED Rendered Safe in Glenarm, Co. Antrim – Three Arrested

Location/Time: Feystown Road, Glenarm, County Antrim, Northern Ireland | After 10:00 local | 6 April 2026

Category / Context: Unknown – Dissident Republican activity suspected by PSNI but not claimed at time of reporting

Incident Type: Discovery / Disruption (controlled explosion by ATO)

Incident Summary (TTP-focused): Police Service of Northern Ireland (PSNI) responded to a report of a suspicious device on the Feystown Road in the Glenarm area of County Antrim shortly after 10:00 AM on 6 April. Ammunition Technical Officers (ATO) attended and conducted a controlled explosion on the item, which was subsequently assessed as a viable explosive device. Three individuals – two men aged 43 and 47, and a woman in her 70s – were arrested at or near the scene. A 43-year-old man was subsequently charged with doing an act with intent to cause an explosion likely to endanger life or cause serious injury to property, obstructing police, and possessing fireworks without a licence.

  • Device Type: Viable explosive device – specific construction not publicly disclosed
  • Delivery & Placement: Placed on rural road (outdoor, open setting)
  • Initiation Method: Not specified in open sources; treated as potentially victim-operated or time/command given ATO response posture
  • Target Type: Unknown; location suggests a possible route denial or infrastructure targeting intent, or an uncompleted placement
  • Effects: No injuries; device rendered safe
  • Suspected Perpetrator: PSNI have not publicly attributed the device. Given geographic context and timing – occurring within days of the New IRA’s proxy bomb attack on Lurgan police station (31 March) – dissident republican involvement is assessed as probable by regional security analysts. Not confirmed.
  • Confidence: Confirmed (multiple reputable Northern Irish outlets, PSNI statements)
  • Source Reliability: High – Irish Times, RTE News, Irish News, Newsletter all independently reported

Sources:

Analyst Note: This incident sits inside a short but dense series of dissident republican device activity in Northern Ireland during late March and early April 2026. The Lurgan police station proxy bomb (31 March, New IRA claimed) and Glenarm recovery within six days suggest either parallel dissident republican cells operating independently or a single coordinated cell working sequentially. The rural Glenarm location – away from PSNI facilities – is an outlier relative to the Lurgan attack’s direct targeting of security infrastructure. This may represent an operational rehearsal, a failed placement targeting an unidentified location along Feystown Road, or a wholly unrelated criminal matter. Investigators should watch for further device placements or infrastructure-targeted movements in Antrim in the near term. The age demographics of those arrested (70s woman, middle-aged men) deviate from the typical dissident republican operational profile and warrant further analytical attention.

CARD 2: TTP Motorcycle IED Strikes Police Patrol, Lakki Marwat, KP

Location/Time: Shahbazkhel, Lakki Marwat District, Khyber Pakhtunkhwa, Pakistan | Daytime | 7 April 2026

Category / Context: Terror/Insurgent – Tehrik-i-Taliban Pakistan (TTP)

Incident Type: Detonation

Incident Summary (TTP-focused): A Tehrik-i-Taliban Pakistan (TTP) cell positioned a motorcycle fitted with an IED along the Bannu-Dera Ismail Khan section of the Peshawar-Karachi Indus Highway in Shahbazkhel. The device detonated as a police patrol from Shahbazkhel police station passed the parked motorcycle. Five officers – one Assistant Sub-Inspector (ASI) and four constables, including a driver – were injured and transported to District Headquarters Hospital Lakki Marwat. The attack used a roadside motorcycle as the device carrier, a signature TTP technique in this corridor that affords deniability and reusability of components not destroyed in the blast.

  • Device Type: RCIED or VOIED (motorcycle-borne IED); specific initiation method not confirmed in open sources
  • Delivery & Placement: Motorcycle parked along highway verge targeting passing patrol
  • Initiation Method: Not specified (remotely initiated or victim-operated – open sources do not specify)
  • Target Type: Mobile police patrol; highway (logistics/transit corridor)
  • Effects: 5 police personnel injured; none reported killed
  • Suspected Perpetrator: TTP – confirmed by PSNI spokesperson and multiple Pakistani security/news sources
  • Confidence: Confirmed (multiple independent Pakistani news outlets, TTP attribution confirmed by official spokesperson)
  • Source Reliability: High – Express Tribune, Pakistan Today, Organiser, Dawn, Times of Islamabad, counteriedreport.com index all independently covered

Sources:

Analyst Note: TTP has sustained a high operational tempo along the Bannu-DI Khan corridor through the first quarter of 2026. This attack on 7 April follows a similar motorcycle-IED strike in Lakki Marwat on 1 April (9 injured, 4 police) and a pattern of 2-3 IED events per week in southern KP. The technique – motorcycle as device carrier targeting mobile patrols – is characteristic of TTP’s “deny the road” approach: keeping police in reactionary posture, raising the cost of routine mobility operations, and degrading morale without requiring the escalatory exposure of a complex attack. TTP’s persistence in this corridor despite counter-IED pressure suggests the group retains effective IED construction capability and a functioning local logistic chain. Commanders operating in or advising on this area should anticipate continued motorcycle-IED employment and consider pattern-of-life analysis of vehicle placements proximate to police movement routes.

CARD 3: Pipe Bomb Cache Discovered at McMinnville, Oregon Residence

Location/Time: Mobile home, McMinnville, Yamhill County, Oregon, USA | Discovered during search warrant execution | 6 April 2026

Category / Context: Criminal / Unknown – no ideological or organizational affiliation identified at time of reporting

Incident Type: Discovery / Cache find

Incident Summary (TTP-focused): McMinnville Police Department executed a search warrant at a mobile home residence occupied by Evan Maihack, 38. During the search, officers found completed pipe bombs and materials for manufacturing additional explosive devices. Maihack was arrested on-site and subsequently arraigned on five counts, including possession of a destructive device. No intended target was identified in open sources at time of reporting.

  • Device Type: Pipe bombs (specific construction details not published); manufacturing materials also present
  • Delivery & Placement: Static cache; in-home storage
  • Initiation Method: Not specified in open sources
  • Target Type: Unknown – no target identified
  • Effects: No detonation; no injuries; devices rendered safe
  • Suspected Perpetrator: Evan Maihack, 38, McMinnville – charged; no organizational affiliation identified
  • Confidence: Confirmed (law enforcement arrest, court arraignment, KPTV reporting)
  • Source Reliability: High – KPTV Portland (ABC affiliate) with police/court confirmation

Sources:

Analyst Note: This case fits the U.S. lone-actor domestic bomb-possession pattern: male, 30s-40s, residential cache, no identified organizational affiliation or stated target. Without further detail on Maihack’s communication records, online activity, or stated grievances, the threat level cannot be precisely assessed. However, the existence of multiple completed devices – not merely materials – suggests this was not purely experimental. Bomb technicians should note the continued prevalence of pipe bomb construction as the default device type for non-ideological domestic actors in the U.S. The McMinnville case and the Gracie Mansion TATP case (Card 4) arrived in the same reporting week, illustrating the diversity of the U.S. domestic explosive threat spectrum: from ideologically motivated TATP with shrapnel enhancement to criminal/unknown pipe bomb caches. EOD professionals and law enforcement interlocutors should monitor arraignment outcomes for additional detail on device construction and intent.

CARD 4: Gracie Mansion TATP Plot – Grand Jury Indicts Two on Terrorism and WMD Charges

Location/Time: Outside Gracie Mansion, Upper East Side, New York City, USA | IED attack: 7 March 2026; Indictment unsealed: 8-9 April 2026

Category / Context: Terror/Insurgent – ISIS-inspired domestic terrorism

Incident Type: Attempted Detonation (devices malfunctioned; no detonation achieved)

Incident Summary (TTP-focused): On 7 March 2026, Emir Balat (18) and Ibrahim Kayumi (19), both of Pennsylvania, transported two improvised explosive devices to a protest outside Gracie Mansion – the official residence of NYC Mayor Zohran Mamdani – and attempted to detonate them. The devices were mason-jar-sized containers filled with TATP (triacetone triperoxide), fitted with fuses, and externally wrapped with nuts, bolts, and duct tape for fragmentation effect. Neither device functioned as intended; no casualties resulted. The men were arrested at the scene.

A federal grand jury returned an indictment unsealed 8-9 April 2026 with eight counts: conspiracy to provide material support to a foreign terrorist organization (ISIS), attempted provision of material support, conspiracy to use a weapon of mass destruction, attempted use of a weapon of mass destruction, carrying explosives during the commission of a federal felony, transportation of explosive materials, and interstate transportation and receipt of explosives. New information released with the indictment included dashcam footage of the suspects discussing killing up to 60 people, a handwritten bomb-making notebook recovered from Balat, and evidence that Balat wrote a post-arrest pledge of allegiance to the Islamic State. FBI detonated additional TATP materials discovered at a Pennsylvania storage facility linked to the suspects.

  • Device Type: TATP-filled PBIED (improvised hand-thrown device with fuse) – x2; shrapnel-enhanced with nuts and bolts
  • Delivery & Placement: Hand-carried; thrown at protest crowd and residence
  • Initiation Method: Friction/hobby fuse (fuses attached per charging documents)
  • Target Type: Political figure (NYC Mayor’s residence); civilian protest crowd; intent expressed to cause mass casualty event
  • Effects: None – devices failed to function; zero casualties; FBI rendered additional materials safe in Pennsylvania
  • Suspected Perpetrator: Emir Balat, 18, and Ibrahim Kayumi, 19 – both charged; ISIS-inspired; self-radicalized per court filings
  • Confidence: Confirmed (federal indictment, DOJ press release, FBI confirmation, multiple major outlets)
  • Source Reliability: High – CNN, CBS News, NBC New York, ABC7, DOJ/FBI official statements

Sources:

Analyst Note: This case represents the most tactically complete ISIS-inspired domestic device plot disclosed in the United States in recent years. Three elements warrant particular attention from EOD and C-IED professionals. First, TATP construction: the suspects sourced, synthesized, and successfully produced functional TATP devices, stored additional material off-site, and demonstrated at least rudimentary understanding of shrapnel enhancement. The fact that the devices failed to function likely reflects fuse or initiation error rather than material failure, given FBI’s subsequent decision to detonate recovered materials. Second, the recruitment-to-deployment timeline: the men appear to have self-radicalized with minimal external facilitation. The notebook containing synthesis steps and a pre-attack allegiance statement suggest methodical preparation rather than impulsive action – a concerning signature for lone-actor detection. Third, the symbolic target: Gracie Mansion was selected partly for its visibility, partly because the mayor is Muslim, per available evidence. This targeting logic – attacking a Muslim public figure as an apostasy provocation – is consistent with a strand of ISIS operational messaging that identifies Western Muslims in authority as priority targets. The broader implication: protest environments in politically charged urban settings are emerging as device deployment opportunities for ISIS-inspired actors seeking crowds, media coverage, and proximity to political targets simultaneously.

CARD 5: Crude Bomb Injures Five Police During Search Operation, Begusarai, Bihar

Location/Time: Navkothi area, Begusarai District, Bihar, India | Afternoon | 11 April 2026

Category / Context: Criminal – linked to robbery investigation; not assessed as terrorist or political violence

Incident Type: Detonation (accidental or booby trap during law enforcement search)

Incident Summary (TTP-focused): A joint team of the Bihar Special Task Force (STF) and district police were executing a search of premises belonging to Sandeep Kumar, an accused in a Rs. 2 crore bank and jewellery showroom robbery in Darbhanga (April 3 incident). During the search of an outdoor area at the Navkothi location, a crude bomb detonated, injuring five officials: ASI Vipin Kumar Ojha, trainee Sub-Inspector Gudiya Kumari, and three STF personnel. All sustained minor burns and injuries to hands, legs, and faces. No fatalities reported; all are listed as out of danger.

  • Device Type: Crude bomb – specific construction not disclosed; “crude bomb” terminology typically indicates a locally manufactured container device with low-grade explosive fill in the Indian criminal context
  • Delivery & Placement: Placed on or buried near the suspect’s property, likely as a booby trap or for concealment
  • Initiation Method: Victim-operated (likely pressure or disturbance-triggered) or accidentally initiated during handling; not confirmed
  • Target Type: Law enforcement (search team) – booby trap at criminal suspect’s premises
  • Effects: 5 injured; minor burns and blast injuries; all survived
  • Suspected Perpetrator: Linked to criminal activity of robbery accused Sandeep Kumar – not a known insurgent or terror organization
  • Confidence: Confirmed (multiple reputable Indian outlets, official police statement)
  • Source Reliability: High – Tribune India, The Daily Jagran, Social News XYZ, Telangana Today

Sources:

Analyst Note: Booby-trapping of criminal premises against law enforcement is a persistent low-level threat in Bihar and adjacent Indian states, distinct from Naxalite or Kashmiri IED activity in character and construction. Crude bombs placed by robbery or organized crime suspects targeting police search teams require the same precautionary approach as any IED encounter: evidence of explosive material at a suspect location must trigger EOD consultation before continued search. No intelligence of escalation to more sophisticated devices in this criminal context is currently evident, but the injury of five officials in a single device event underscores the real-world casualty potential even of improvised criminal devices. Search teams working active robbery investigations in Bihar should incorporate IED awareness protocols, particularly when the suspect has known criminal firearms or explosive associations.

CARD 6: Atesh Partisan Network Claims Military Locomotive Sabotage in Rostov Oblast

Location/Time: Rostov Oblast, Russia | 12 April 2026

Category / Context: Conflict-related – pro-Ukrainian partisan activity

Incident Type: Sabotage

Incident Summary (TTP-focused): The pro-Ukrainian partisan network Atesh claimed responsibility for sabotaging a diesel locomotive in Russia’s Rostov Oblast on 12 April 2026. Atesh stated the locomotive was transporting military cargo toward Russian-occupied Zaporizhzhia Oblast. The exact means of sabotage – whether explosive device, incendiary, or mechanical interference – was not specified in open-source reporting available at time of compilation.

  • Device Type: Not specified in open sources
  • Delivery & Placement: Unknown
  • Initiation Method: Unknown
  • Target Type: Russian military logistics infrastructure (freight locomotive)
  • Effects: Not confirmed; locomotive reported as disabled
  • Suspected Perpetrator: Atesh – pro-Ukrainian partisan network; consistent with group’s documented operating pattern in Russian-controlled territory
  • Confidence: Probable (Atesh claim; no independent Russian official confirmation or denial in available sources)
  • Source Reliability: Medium – Atesh has a credible historical record of rail sabotage claims with documented evidence, but specific claims require independent corroboration

Sources:

Analyst Note: Atesh and affiliated Ukrainian partisan networks have conducted a sustained campaign of railway and logistics sabotage throughout 2025-2026, with dozens of confirmed or probable incidents targeting fuel transport, military freight, and command communications infrastructure. Rail sabotage in Rostov Oblast is operationally significant because Rostov is a primary Russian military logistics hub for the southern axis into occupied Zaporizhzhia. If the claim is accurate, this represents continued Ukrainian capacity to reach logistics depth in Russian territory despite intensified FSB counterintelligence operations. For C-IED analysts, the Atesh pattern is worth tracking as an operational model: small, covert partisan cells using low-signature sabotage rather than high-casualty IED strikes, prioritizing deniability and supply chain disruption over body count. This mirrors tactics used by other resistance networks historically (e.g., WWII European resistance) and may inform threat model development for other conflict environments where asymmetric actors face technologically superior conventional forces.

Weekly TTP and Threat Pattern Analysis

Device Construction and Configuration

The reporting week produced a narrow but analytically rich device sample. The most significant construction revelation came with the Gracie Mansion indictment (Card 4): the devices were TATP-filled, fuse-initiated, mason-jar containers with external shrapnel enhancement (nuts and bolts). This configuration – TATP main charge, improvised fragmentation sleeve, basic fuse – is a departure from the more common peroxide paste devices seen in prior U.S. domestic plots. The shrapnel integration indicates the actors understood TATP’s blast profile is primarily overpressure-based without enhancement, and deliberately compensated. The device failure appears to have been an initiation problem rather than a charge problem, given that FBI subsequently destroyed additional TATP material at the suspects’ Pennsylvania storage site. This matters: the explosive itself was functional. The failure was operational, not technical.

The Pakistan motorcycle-IED pattern (Card 2) continues to employ a proven and replicable TTP. The motorcycle functions as a low-observable, low-cost, disposable platform that does not require the actor to remain at the target. Against mobile police patrols on predictable routes, this technique carries minimal operational risk to the attacker. That TTP has sustained this approach without significant modification – rotating only between command-wire, remote, and pressure-plate initiation depending on site geometry – suggests the group either does not need to evolve (because success rates are adequate) or lacks access to substantially more sophisticated initiators. Either conclusion is consistent with TTP’s current operational posture in southern KP.

Targeting Patterns

Two distinct targeting logics emerged this week. The first is anti-security force: the TTP motorcycle attack in Lakki Marwat and the suspected dissident republican device in Glenarm both target security institutions, whether directly (police patrol) or indirectly (placement in an area associated with security operations). The second is symbolic/political: the Gracie Mansion TATP attack targeted the mayor’s residence during a politically visible protest, seeking both casualties and media impact. The distinction matters for protective security posture – mobile patrol routes and fixed police facilities require different mitigation approaches than crowd-event IED interdiction.

No campaign-level geographic spread was observed within the week. Pakistan’s KP corridor and Northern Ireland’s Antrim remain persistent activity areas operating independently.

Geographic Spread and Concentration

IED activity remains heavily concentrated in three recurring hotspots: Pakistan’s southern Khyber Pakhtunkhwa (TTP campaign, multiple attacks per week throughout Q1 2026), Northern Ireland (accelerating dissident republican activity since late March 2026), and the broader Nigeria/Niger State corridor (just outside the window). There is no evidence of geographic expansion into new theaters this week, though the HAYI European IED campaign – if the group is assessed as genuine – would represent a meaningful new vector. HAYI’s authenticity remains contested (see Appendix/Data Gaps).

Cross-Regional TTP Convergence

The most notable cross-regional convergence is the continued use of motorcycles as IED delivery platforms across multiple unrelated threat environments. Pakistan (Card 2), Nigeria’s Niger State (just outside window, 5 April), and previously Mali and Thailand all saw motorcycle-associated IED employment in March-April 2026. Motorcycles provide tactical mobility, low observer signature, and deniability across very different operational contexts – from Sahelian convoy ambush terrain to South Asian highway corridors. This is not coordination; it is convergent tactical selection of a reliable platform.

The second convergence is youth recruitment for explosive operations. The Paris Bank of America IED plot (HAYI-linked, late March) used teenagers recruited via Snapchat and paid 500-1,000 euros per attack. The Gracie Mansion TATP plot involved an 18 and a 19-year-old who self-radicalized via online ISIS material. Both cases represent distinct radicalization pathways – paid criminal proxy versus ideological self-selection – but arrive at the same operational outcome: young, relatively inexperienced actors handling high-energy explosives with limited technical training. This is an important trend for EOD interlocutors. Device malfunctions by inexperienced actors are operationally beneficial in the short term but create unpredictable secondary hazard environments when devices are located post-incident.

Implications for EOD and C-IED Professionals

Three forward-looking items warrant attention in the coming week. First, Northern Ireland: the pace of dissident republican device activity – a proxy bomb in Lurgan (31 March), a viable device in Glenarm (6 April) – is the highest sustained tempo in several years. Devices are varying in placement context (urban police facility vs. rural road) and demographic profile of those involved, suggesting possible parallel cell activity. PSNI and ATOs should anticipate additional incidents and ensure ATM protocol preparedness for proxy-bomb variants. Second, the Pakistan KP corridor: TTP has maintained 2-4 IED events per week along the Bannu-DI Khan axis. No sign of operational deescalation. Counter-IED teams advising Pakistani police should expect continued motorcycle-IED employment and consider high-visibility route-clearance posture to deter placement. Third, TATP in North America: the Gracie Mansion case confirms that self-radicalized U.S.-based actors are now synthesizing functional TATP for deployment. Device failure rates notwithstanding, TATP’s production accessibility and high sensitivity make post-blast scenes extremely hazardous. U.S. EOD responders should apply TATP protocols to any ISIS-associated device scene until confirmed otherwise.

Appendix: Conventional Conflict Context – IED/Asymmetric Implications

Iraq: U.S. Strikes on Iran-Backed PMF Targets (6-8 April 2026)

Situation Summary: U.S. aircraft conducted multiple strikes against Iranian-backed Popular Mobilization Forces (PMF) infrastructure in Iraq on 6 April 2026, targeting Brigade 52 in Salah ad-Din province and Brigade 13 in Anbar. On 8 April, the Islamic Resistance in Iraq – an umbrella of Iran-backed militias – announced a two-week suspension of military operations, following a tentative ceasefire framework between Iran and the United States. Prior to the ceasefire, a rocket strike killed two civilians in Baghdad, and drone attacks targeted a U.S. diplomatic site.

IED/CT Implications: The PMF ceasefire reduces the immediate probability of IED and drone attacks on U.S. and coalition positions in Iraq for the ceasefire period. However, the suspension applies only to declared Islamic Resistance in Iraq operations. Independent Shi’a militia factions not bound by the ceasefire remain capable of IED employment. Historical pattern: PMF-linked groups shift to IED harassment during de-escalation periods to maintain pressure while preserving deniability against ceasefire terms. EOD teams supporting U.S. diplomatic and military facilities in Iraq should not assume the ceasefire eliminates the IED threat; it may displace it to lower-attribution formats. ISIS (Daesh) residual cells in the Kirkuk-Diyala triangle remain wholly unaffected by the PMF ceasefire and continue to operate opportunistically.

Lebanon: Operation Eternal Darkness – Israeli Strikes (8 April 2026)

Situation Summary: Israel launched Operation Eternal Darkness on 8 April 2026, conducting approximately 160 munitions strikes across Beirut and southern Lebanon involving approximately 50 aircraft. Lebanese authorities called the event “Black Wednesday,” reporting at least 357 deaths including significant civilian casualties. The strikes followed Hezbollah signaling a pause in attacks against Israel in connection with the broader Iran-U.S. ceasefire framework. On 10 April, Israeli-Lebanese ceasefire negotiations were announced.

IED/CT Implications: Large-scale Israeli strikes on Lebanese infrastructure, particularly those hitting Hezbollah supply lines and weapons caches, historically generate two second-order IED effects: first, they disrupt Hezbollah’s ability to transfer sophisticated munitions (ATGM, IRAM, advanced IEDs) to proxy networks in Syria, Iraq, and Yemen, reducing precision IED capability in those theaters in the 30-90 day horizon. Second, they accelerate the pace of ordnance abandoned in civilian areas – Hezbollah has pre-positioned munitions throughout southern Lebanon residential zones. ERW and UXO density in Lebanese civilian areas will increase following strikes at these sites. Humanitarian demining and ERW organizations should expect elevated UXO clearance demand in Lebanon in the weeks following strikes, particularly in the Bekaa Valley and southern districts. Additionally, Hezbollah’s proxy networks in Syria and Iraq may increase IED tempo to signal continued relevance and deter further Israeli strikes from being perceived as consequence-free.

Russia-Ukraine War: Partisan and Resistance IED Activity

Situation Summary: The Russia-Ukraine conventional conflict continued at sustained intensity through the reporting week. Of specific relevance to this brief: Atesh partisan network claimed at least two sabotage operations during the week (Card 6; and a communications tower attack in Belgorod Oblast). The FSB announced on 3 April – just outside the window – that it had foiled a Ukrainian plot to assassinate a senior security official using a WBIED concealed in an electric scooter near a Moscow business center. The device contained 1.5 kg of plastic explosive with bolt-and-nut shrapnel, initiated remotely via WiFi/4G relay.

IED/CT Implications: The Moscow scooter bomb design is analytically significant: a commercially available electric scooter as device concealment, WiFi/4G dual-relay initiation, and plastic explosive main charge represents a step up in sophistication from prior Ukrainian-attributed assassination devices in Russia. The dual-relay initiation (smart home WiFi plus 4G modem) provides redundancy against signal jamming and suggests access to operational security expertise. If the attribution is accurate, this indicates Ukrainian intelligence services have refined IED assassination tradecraft for urban Russian environments. The broader implication for protective intelligence: electric scooters, e-bikes, and similar low-profile urban vehicles have entered the IED concealment threat matrix in denied-access environments.

Data Gaps and Limitations

Middle East & Levant: Reporting on IED-specific incidents in Iraq was dominated by conventional PMF/U.S. strike coverage during the ceasefire period. ISIS-attributed IED activity in the Kirkuk-Diyala triangle was not isolated in available sources for April 6-12 despite continued background threat. Syria IED incidents for this specific window were not surfaced – search returns were dominated by January 2026 Homs mosque bombing and general conflict reporting. Lebanon: all available reporting consumed by Operation Eternal Darkness conventional airstrike coverage. Data gaps in all three countries are assessed as primarily a reporting saturation effect rather than absence of incidents.

Sahel & West Africa: Specific IED incidents for April 6-12 in Mali and Burkina Faso were not surfaced. The most recent actionable Sahel summary covered March 21-April 3. JNIM and ISGS both remain active throughout the region with IED-based convoy ambush as a primary tactic; absence in this report reflects reporting lag and media access constraints (both countries have expelled Western journalists or embedded Pravda-aligned media), not assessed absence of incidents. Niger State, Nigeria: the most significant IED event (bridge approach IED kills commercial driver and motorcyclist, 5 April) falls one day outside the window. The pattern of bridge destruction along the Lumma-Babanna corridor represents an escalating campaign to deny ground mobility in northwestern Nigeria.

East Africa & Horn of Africa: No IED incidents in Somalia specifically within April 6-12 were surfaced with confidence. Al-Shabaab mortar attacks on Mogadishu in April 2026 were found but dates were imprecise. Kenya/Mandera: the most recent al-Shabaab IED attack on PSNI vehicles (March 15) falls outside the window. The persistent RCIED threat along the Elwak-Wargadud road in Mandera County is well-documented and ongoing; no specific incidents within the window were confirmed. Mozambique/ASWJ: no incidents surfaced for this period.

South Asia – Pakistan: A suicide VBIED killed five in Bannu, KP on 3 April (just outside window). A motorcycle-IED in Serai Naurang on 1 April injured nine. Both are immediately preceding context. Within the window, the Lakki Marwat attack (Card 2) is the only confirmed IED event. Balochistan: no specific incidents surfaced for April 6-12 despite persistent background threat from Baloch separatist groups.

South Asia – India: The Bihar crude bomb (Card 5) is the only confirmed IED incident. Naxalite and Kashmir IED activity: no specific incidents for April 6-12 surfaced in search results.

Southeast Asia: Thailand’s Deep South – the most recent IED incident found was a roadside bomb injuring a Thai soldier in Yala, February 8, 2026. No specific incidents for April 6-12 confirmed. Philippines/Mindanao – no incidents surfaced for this window. Myanmar – an IED injured three bridge workers on April 1 (outside window). All three theaters carry persistent background IED threats; data gaps reflect reporting access issues and regional media competition from Lebanon/Iraq stories.

China: No IED or explosive device incidents surfaced for April 2026. A fireworks warehouse explosion in Chongqing (March 30) is the most recent related event, assessed as accidental/industrial. Chinese authorities do not routinely publicize domestic security incidents in real time; absence in open sources is not a reliable indicator of absence of incidents.

Russia & Former Soviet Union: The Vladikavkaz fireworks warehouse explosion (10 April, 2 killed, 14 injured including children) falls within the window but is excluded from incident cards as an accidental industrial event, not an IED or criminal explosive incident. Suspects were arrested and charged with storage violations. The Moscow scooter bomb foiling (3 April, just outside window) is covered in the Appendix.

European Union: France: no new HAYI-attributed IED detonations within April 6-12 confirmed. The Paris Bank of America IED attempt (late March) remains under active terrorism prosecution. Four suspects including three teenagers face terrorism charges. Germany: no ATM bombing incidents for this specific window were surfaced, though ATM explosive robbery remains a persistent background threat at 1+ events per week nationally. Balkans, Greece, Italy, Spain: no incidents surfaced for this period.

Scandinavia: Sweden: gang-related explosive attacks continue at the documented background pace of approximately 1 per day nationally, but no specific incidents for April 6-12 were isolated in search results. Norway: the Oslo US Embassy IED (March 8, three brothers arrested March 11) remains under investigation; three Norwegian brothers of Iraqi origin are charged – possible state direction under investigation. No new Scandinavian incidents within the window were confirmed. Denmark: no incidents surfaced.

British Isles: Northern Ireland incidents (Card 1, Glenarm; Lurgan proxy bomb 31 March as context) are the dominant story. No incidents in Great Britain for this period were confirmed.

North America: Cards 3 and 4 cover the two main events. Additional item of note: Madison County, Illinois bomb squad conducted scheduled controlled detonations of legacy munitions on 7 April. A Troy, Illinois residential explosion on 7 April killed three people – assessed as accidental/residential gas or ordnance rather than criminal/terror IED; excluded per criteria.

South America: No confirmed IED or criminal explosive incidents within the window. Colombia: the most significant event was the border bomb diplomatic dispute between Colombia and Ecuador (March, just outside window) involving a 250 kg unexploded munition in the Ipiales area near the Ecuadorian border.

Central America: No confirmed IED incidents within the window. The region carries a persistent grenade and small explosive threat from MS-18 and other criminal networks, particularly in Honduras and Guatemala.

Caribbean: No incidents surfaced for this period. Search terms used: “explosive device,” “bomb,” “controlled detonation,” “Jamaica,” “Trinidad,” “Caribbean” – all returned no relevant current results.

End of Brief – Next scheduled brief: 20 April 2026

Latest Posts

PDF Version

Explosive Incident Brief for the Week of 6-12 Apr 2026Download
#No Tag

Comments are closed