TLP:CLEAR · Disclosure is not limited.

Iran situation report: south-east insurgency claims unverified

Time window: Last 1 day · Audience: General analyst · Type: Situation report · DTG: 2026-11-10 15:46Z · Overall confidence: HIGH

BLUF

The supplied claims do not substantiate an escalation by Baloch armed groups in Sistan-Baluchestan, the reported toll of 94 dead and 33 wounded, or Jaish al-Adl responsibility. Reporting on the wider US-Israel-Iran conflict is inconsistent and does not establish a link to violence in south-east Iran.

Executive summary

The supplied claims contain no incident-level reporting of Baloch armed group attacks in Sistan-Baluchestan, no corroborated provincial casualty tally and no attribution to Jaish al-Adl. The prior brief’s finding that the toll and sustained escalation were unsubstantiated therefore remains unchanged. Reporting on the wider conflict is mixed: Donald Trump described the war as militarily effectively over, while a separate report described daily US attacks around the Strait of Hormuz and Qeshm Island. Neither account establishes a connection to internal security in south-east Iran.

Change from previous assessment

No material change to the south-east assessment: this run adds no reporting on Baloch attacks, the reported casualty toll or Jaish al-Adl responsibility, so the prior low-confidence finding remains. The wider conflict picture now includes reports describing the war as effectively over alongside a report of daily strikes around the Strait of Hormuz and Qeshm Island. These developments do not establish an internal-security link.

Key judgments

1. The supplied record does not substantiate the reported toll of 94 dead and 33 wounded, a sustained escalation by Baloch armed groups in Sistan-Baluchestan, or Jaish al-Adl responsibility. This is an assessment of an evidence gap, not evidence that attacks did not occur. Confidence is low because the supplied claims contain no incident-level reporting on these allegations. (Confidence: low · ASSESSED)
   • I&W: Confirm the evidence-gap assessment if, over the next 0-14 days, no incident-specific reports identify an attack date and location in Sistan-Baluchestan, a named perpetrator and casualty figures. (0-14 days)
   • I&W: Break the assessment if two independent reports or an official notice identify an attack by Jaish al-Adl or another named Baloch group and provide casualty figures that verify or revise the reported 94 dead and 33 wounded. (0-14 days)
2. Reporting on the wider US-Israel-Iran conflict conflicts over whether hostilities have effectively ended. Donald Trump said the war was militarily effectively over and renewed US attacks were highly unlikely, while a separate report described daily US attacks in the Strait of Hormuz and on Qeshm Island, alongside Iranian action against US aircraft and shipping. The conflict status is unresolved in the supplied record, and these reports do not establish a link to Baloch armed activity in Sistan-Baluchestan. Confidence is low because the accounts materially conflict and the report of daily attacks is single-source in the supplied claims. (Confidence: low · ASSESSED)
   • I&W: Confirm continuing hostilities if independent reporting records a new US strike on Iranian targets in the Strait of Hormuz or on Qeshm Island. (0-14 days)
   • I&W: Break the assessment that conflict status is unresolved if the US and Iran announce and observe a cessation of hostilities, with no subsequent strike reports from the Strait of Hormuz or Qeshm Island. (0-14 days)

Outlook & scenarios

Reporting gap persists (70%)

Likely, the next reporting cycle will still lack independently corroborated, incident-level evidence of Baloch attacks in Sistan-Baluchestan. The reported toll and Jaish al-Adl attribution will remain unverified, not disproved.

Localised incidents become verifiable (25%)

Unlikely, new reporting will establish one or more dated attacks by Jaish al-Adl or another named Baloch armed group in Sistan-Baluchestan, but will not support a province-wide mass-casualty toll.

High-impact escalation is verified (5%)

Very unlikely, multiple independent sources will verify a coordinated attack campaign and a province-wide death and injury toll matching the headline allegation. This would materially change the internal-security assessment.

Recommendations

1. Do not present the reported 94 dead and 33 wounded as established facts. Label the figures unverified unless incident-level reporting and casualty counts are independently corroborated.
2. Recheck reports concerning Zahedan, Parud and the Zahedan courthouse against original reporting and a second independent source. Keep the identity of the attackers separate from claims of responsibility by Jaish al-Adl.
3. Keep reporting on US-Israel-Iran hostilities separate from assessments of Baloch activity in Sistan-Baluchestan unless a source explicitly links the actors or events.
4. Update the assessment if reporting provides dated locations, named targets, casualty breakdowns and independently supported attribution for attacks in Sistan-Baluchestan.

Confidence & uncertainty

Overall confidence is high in the narrow finding that the supplied record does not substantiate the south-east insurgency allegations. The 24-source packet contains corroborated reporting from major media on the wider external conflict, but that corroboration does not extend to Baloch attacks or casualty figures in Sistan-Baluchestan. The conflict’s status remains uncertain because reporting on Trump’s statements conflicts with a separate account of daily strikes. Confidence in the truth of the insurgency allegations is low.

Intelligence gaps

• [EEI 1.1 · UNCOVERED] Confirmed number, locations, dates, targets, and methods of attacks attributed to Baloch armed groups in Sistan-Baluchestan during the reporting period. Recommended collection: local media/social media
• [EEI 1.2 · UNCOVERED] Verified Iranian military, Islamic Revolutionary Guard Corps, police, border-guard, and civilian fatalities and wounded associated with the attacks. Recommended collection: official statements/local reporting
• [EEI 1.3 · UNCOVERED] Evidence of coordinated or simultaneous attacks across multiple districts, including attacks on bases, checkpoints, patrols, government facilities, or transport routes. Recommended collection: local reporting/geospatial imagery
• [EEI 1.4 · UNCOVERED] Use of newly observed weapons, explosives, drones, ambush tactics, or improved command-and-control by the armed groups. Recommended collection: battlefield reporting/video analysis
• [EEI 2.1 · UNCOVERED] Deployment or redeployment of IRGC, army, police, border guards, special forces, armored vehicles, aircraft, or drones to Sistan-Baluchestan. Recommended collection: satellite imagery/local reporting
• [EEI 2.2 · UNCOVERED] New checkpoints, curfews, internet or telecommunications disruptions, road closures, arrests, raids, executions, or other emergency security measures. Recommended collection: local media/social media
• [EEI 2.3 · UNCOVERED] Changes in Iranian control of border crossings, district administrative centers, highways, or key security installations. Recommended collection: geospatial imagery/local reporting
• [EEI 2.4 · UNCOVERED] Verified civilian displacement, civilian casualties, protests, sectarian incidents, or retaliatory violence following security-force operations. Recommended collection: humanitarian reporting/local sources
• [EEI 3.1 · UNCOVERED] Attacks or armed incidents spreading to new districts, major transport corridors, coastal areas, or provinces outside the current southeastern operating area. Recommended collection: incident databases/local reporting
• [EEI 3.2 · UNCOVERED] Evidence of cross-border movement, staging areas, weapons transfers, training, or safe-haven activity involving Pakistan, Afghanistan, or other neighboring territory. Recommended collection: border reporting/satellite imagery
• [EEI 3.3 · UNCOVERED] Public claims, intercepted communications, or captured equipment indicating material, financial, intelligence, or operational support from foreign governments or transnational militant networks. Recommended collection: official releases/open-source intelligence

Red cell review: CONCUR

TLP:CLEAR