Drooid Logo
Back to story perspectives

Full Breakdown

Rise of a Shadowy Iran-linked Group Behind a Wave of Anti-Jewish Attacks in Europe

5/1/2026, 3:19:54 PM

Series of Europe-wide Attacks Targeting Jewish Institutions

Between 9 March and 23 March 2026, a series of low-tech assaults struck Jewish sites in Belgium, the United Kingdom, the Netherlands and Germany. Incidents included the arson of a car in Antwerp’s Jewish quarter, the fire-bombing of four Hatzola ambulances in London’s Golders Green, a stabbing of two British Jewish men in the same London neighbourhood, and claimed explosions near Jewish schools and an American bank in Amsterdam. Police arrested two teenagers in Antwerp and a 45-year-old Somali-born suspect in London; several other suspects remain in custody.

Emergence of Harakat Ashab al-Yamin al-Islamiyya (HAYI) and Iran-linked Hybrid Warfare

The group first appeared on Telegram on 9 March, posting a declaration of “military operations against US and Israeli interests.” Analysts link its branding to the Islamic Revolutionary Guard Corps (IRGC) and to Iraqi pro-Iranian militias, suggesting a hybrid-warfare model that blends criminal recruitment with state-sponsored propaganda.

Key Actors: HAYI, Iranian Networks, European Security Agencies

  • Harakat Ashab al-Yamin al-Islamiyya (HAYI) – a newly surfaced militant brand.
  • Iranian state actors – IRGC and Ministry of Intelligence, alleged sponsors.
  • German Federal Office for the Protection of the Constitution – intelligence agency issuing threat alerts.
  • Metropolitan Police Service (MPS) – leads the UK investigation.
  • International Centre for Counter-Terrorism (ICCT) – provides open-source analysis.

Chronology of Claims and Incidents

  • 9 Mar – HAYI’s first Telegram post; claim of attack on a Liège synagogue.
  • 11 Mar – Unverified video of an explosion in Greece (later deemed disinformation).
  • 13 Mar – Arson claim on a Rotterdam synagogue.
  • 15 Mar – Explosion outside a Jewish school in Amsterdam.
  • 23 Mar – Antwerp car arson; London ambulance fire-bombing; Golders Green stabbing.
  • 28 Apr – German intelligence warns of escalating Iran-linked threat.
  • 29 Apr – UK authorities label the Golders Green attack a terrorist incident.

Scope of the Campaign

German officials cite at least 15 attacks across four countries; the Independent reports five claimed attacks in four nations. Casualties include two stabbing victims (ages 76 and 34) and property damage exceeding £1 million in London. Recruitment offers range from €600 via Snapchat to “quick cash” for arson.

Implications for European Security and Jewish Communities

The pattern suggests a coordinated effort to intimidate Jewish and Western-aligned targets, potentially extending Iran’s regional conflict into Europe. Security services warn of a shift from “simple” arson to more lethal methods, including explosives.

Official Responses from Law Enforcement and Intelligence Services

  • German intelligence spokesperson: “They will no longer limit themselves to ‘simple’ attacks but will also include more dangerous means in the long term.”
  • Marc Henrichmann (German parliamentary oversight chair): “The threat to Jewish, Israeli, and American institutions remains high.”
  • Sir Mark Rowley (MPS Commissioner): “There is no initial evidence of Iranian state direction for the Golders Green attacks; the statements are most likely opportunistic.”
  • Metropolitan Police confirmed the London stabbing as a terrorist incident and highlighted the suspect’s history of violence and mental-health issues.

Analyst Skepticism and Counterarguments

Security experts note linguistic errors in HAYI videos, the rapid reuse of public-domain footage, and the improbability of a new group establishing a trans-national network within weeks. Julian Lanches (ICCT) questions whether HAYI is a genuine terrorist organization or a façade for Iranian hybrid operations. Roger Macmillan (former Iran International security director) describes the group’s claims as “opportunistic” and “lone-wolf” narratives.

Local Accounts and Immediate Reactions

Shomrim volunteers and a local window cleaner helped subdue the Golders Green suspect. Victims are reported in stable condition. Chief Rabbi Sir Ephraim Mirvis urged a “zero-tolerance” approach, while Prime Minister Sir Keir Starmer called the attacks “attacks on Britain.”

Discrepancies and Unresolved Questions

Sources differ on the total number of attacks (five vs. fifteen) and on concrete evidence of Iranian state direction. Some claimed incidents, such as the Greek explosion, are deemed disinformation. The true organizational structure of HAYI—new group, front for existing militias, or decentralized network—remains unverified.

Verbatim Quotes

  • “The suspicious dissemination patterns raise the question whether HAYI is a genuine terrorist group or merely serves as a facade for Iranian hybrid operations that enable plausible deniability.” — Julian Lanches, junior research fellow, ICCT
  • “ Jason Brodsky, policy director at the United Against Nuclear Iran, said: “Harakat Ashab al-Yamin al-Islamiyya’s branding on videos includes logos that are adopted from the Islamic Revolutionary Guard Corps and its broader terror network.” — Jason Brodsky, policy director, United Against Nuclear Iran
  • “Investigators add there is no initial evidence of Iranian state direction for the Golders Green attacks and that therefore the statements made by HAYI on social media are most likely to be opportunistic.” — Sir Mark Rowley, Metropolitan Police Commissioner
  • “By claiming an incident involving physical casualties, HAYI is signalling willingness to associate its brand with direct violence, even if the group did not direct, enable, or have prior knowledge of the attack,” — Tech Against Terrorism report

Future Outlook and Ongoing Investigations

European agencies continue to trace recruitment channels on encrypted platforms and to assess the plausibility of Iranian command-and-control. Germany plans to bolster digital intelligence capabilities, while the UK is reviewing counter-terror legislation ahead of local elections. Continued monitoring of HAYI-linked Telegram channels will determine whether the group evolves beyond propaganda into coordinated lethal operations.